CVE-2015-0110 - Vulnerability Details

Vendors	Products
Ibm	Business Process Manager Websphere Application Server

Link	Providers
http://www.securityfocus.com/bid/73274
https://www-304.ibm.com/support/docview.wss?uid=swg21694940

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-03-13T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-15T19:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940"}, {"name": "73274", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/73274"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2015-0110", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940", "refsource": "CONFIRM", "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940"}, {"name": "73274", "refsource": "BID", "url": "http://www.securityfocus.com/bid/73274"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T03:55:28.166Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940"}, {"name": "73274", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/73274"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2015-0110", "datePublished": "2017-09-15T20:00:00", "dateReserved": "2014-11-18T00:00:00", "dateUpdated": "2024-08-06T03:55:28.166Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2015-03-13T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-09-15T19:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

}

1 : { »

name : 73274 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/73274 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2015-0110 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

refsource : CONFIRM (string)

url : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

}

1 : { »

name : 73274 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/73274 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T03:55:28.166Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

}

1 : { »

name : 73274 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/73274 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2015-0110 (string)

datePublished : 2017-09-15T20:00:00 (string)

dateReserved : 2014-11-18T00:00:00 (string)

dateUpdated : 2024-08-06T03:55:28.166Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "DAC02B89-813E-4B3D-B518-6565BE06C575", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "06DFA125-9D52-4C16-9946-DB8D43700415", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "613CC0CD-083E-439A-9A53-777E69CDE2DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "161542A0-E919-4105-AD4F-C881ACF8D26B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "32504DEB-7391-4452-BA2E-409959B24222", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "D8F74820-DF10-499E-AF7A-93AC285843D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "4C12274F-495C-4E81-A317-E66916B0A2F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "989C89DF-C6CB-45C9-9592-30A83896BD71", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "783C2592-9669-4C75-9E63-C834482F6F8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "7021B830-3EE4-446D-8D87-BBD2097A023E", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.0:*:*:*:lombardi:*:*:*", "matchCriteriaId": "0F01429B-F1A2-4C9A-A942-8C7951D8F454", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.1:*:*:*:lombardi:*:*:*", "matchCriteriaId": "B17CAD84-9637-4166-A8D8-7EC784EF6130", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.2:*:*:*:lombardi:*:*:*", "matchCriteriaId": "C3796DA7-CA75-4C5C-B5ED-F4468D5240C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.3:*:*:*:lombardi:*:*:*", "matchCriteriaId": "05EB6216-7893-45CA-B731-C2E3B86F5D13", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.4:*:*:*:lombardi:*:*:*", "matchCriteriaId": "3378FFC5-D787-448F-BF4C-5545A13C1BDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.5:*:*:*:lombardi:*:*:*", "matchCriteriaId": "885708B0-7176-4C9D-A485-218706AF170A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL."}, {"lang": "es", "value": "IBM Business Process Manager (BPM) 7.5.x, 8.0.x y 8.5.x y WebSphere Lombardi Edition (WLE) 7.2.x permiten que usuarios autenticados remotos omitan las restricciones de acceso establecidas en tipos de servicios internos mediante vectores relacionados con la URL executeServiceByName."}], "id": "CVE-2015-0110", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-09-15T20:29:00.270", "references": [{"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/73274"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/73274"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21694940"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 42264DE4-CEED-4FA5-8C77-82BF9A55F3F2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DAC02B89-813E-4B3D-B518-6565BE06C575 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 06DFA125-9D52-4C16-9946-DB8D43700415 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 613CC0CD-083E-439A-9A53-777E69CDE2DE (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 161542A0-E919-4105-AD4F-C881ACF8D26B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 32504DEB-7391-4452-BA2E-409959B24222 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : D8F74820-DF10-499E-AF7A-93AC285843D1 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C12274F-495C-4E81-A317-E66916B0A2F7 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 989C89DF-C6CB-45C9-9592-30A83896BD71 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 783C2592-9669-4C75-9E63-C834482F6F8A (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7021B830-3EE4-446D-8D87-BBD2097A023E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.0:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : 0F01429B-F1A2-4C9A-A942-8C7951D8F454 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.1:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : B17CAD84-9637-4166-A8D8-7EC784EF6130 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.2:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : C3796DA7-CA75-4C5C-B5ED-F4468D5240C8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.3:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : 05EB6216-7893-45CA-B731-C2E3B86F5D13 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.4:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : 3378FFC5-D787-448F-BF4C-5545A13C1BDF (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:websphere_application_server:7.2.0.5:*:*:*:lombardi:*:*:* (string)

matchCriteriaId : 885708B0-7176-4C9D-A485-218706AF170A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. (string)

}

1 : { »

lang : es (string)

value : IBM Business Process Manager (BPM) 7.5.x, 8.0.x y 8.5.x y WebSphere Lombardi Edition (WLE) 7.2.x permiten que usuarios autenticados remotos omitan las restricciones de acceso establecidas en tipos de servicios internos mediante vectores relacionados con la URL executeServiceByName. (string)

}

]

id : CVE-2015-0110 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:S/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-09-15T20:29:00.270 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/73274 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/73274 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www-304.ibm.com/support/docview.wss?uid=swg21694940 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object