Date published: 2014-12-16T19:59:00.063-05:00
Date last modified: 2017-08-28T21:35:10.017-04:00
CVSS Score: 6.5
Principal attack vector: NETWORK
Reference URL: http://www-01.ibm.com/support/docview.wss?uid=swg1JR51286
Summary: The import/export functionality in IBM Business Process Manager (BPM) 7.5.x through 22.214.171.124, 8.0.x through 126.96.36.199, and 8.5.x through 8.5.5 allows remote authenticated users to bypass intended access restrictions via a project action for a (1) process application or (2) toolkit.