CVE-2008-0402
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even…
Does this matter?
Lower severity and a low EPSS score (1.17%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members of the repository's owning group.
- CVSS 2.0
- 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 1.17% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/websphere business modeler
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/28586Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24018060Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg24018061Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only
- http://www.securityfocus.com/bid/27389
- http://www.securitytracker.com/id?1019252
- http://www.vupen.com/english/advisories/2008/0254
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39830
- http://secunia.com/advisories/28586Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg24018060Patch
- http://www-1.ibm.com/support/docview.wss?uid=swg24018061Patch
- http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only
- http://www.securityfocus.com/bid/27389
- http://www.securitytracker.com/id?1019252
- http://www.vupen.com/english/advisories/2008/0254
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39830
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.