IBM OpenPages GRC Platform CVE-2011-1381 Access Bypass Vulnerability

Bugtraq ID:	68252
Class:	Access Validation Error
CVE:	CVE-2011-1381
Remote:	Yes
Local:	No
Published:	Jun 27 2014 12:00AM
Updated:	Jun 27 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM OpenPages GRC Platform 7.0 IBM OpenPages GRC Platform 6.2.1 IBM OpenPages GRC Platform 6.2 IBM OpenPages GRC Platform 6.1.0.1 IBM OpenPages GRC Platform 6.0.1.5
Not Vulnerable:	IBM OpenPages GRC Platform 7.0.0.2 IBM OpenPages GRC Platform 6.2.1.1 IBM OpenPages GRC Platform 6.1.0.1.4

IBM OpenPages GRC Platform CVE-2011-1381 Access Bypass Vulnerability

IBM OpenPages GRC Platform is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

IBM OpenPages GRC Platform 6.0 through 7.0 are vulnerable.

IBM OpenPages GRC Platform CVE-2011-1381 Access Bypass Vulnerability

An attacker can exploit this issue using a web browser.

IBM OpenPages GRC Platform CVE-2011-1381 Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM OpenPages GRC Platform CVE-2011-1381 Access Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: IBM OpenPages GRC Platform Access Control Bypass (CVE-2011-13 (IBM)