IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
BID:98561
Info
IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
| Bugtraq ID: | 98561 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1159 |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2017 12:00AM |
| Updated: | May 18 2017 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Business Process Manager 8.5 1 IBM Business Process Manager 8.0.1 2 IBM Business Process Manager 7.5.1 2 IBM Business Process Manager 7.5 .0 IBM Business Process Manager 8.5.7.0 CF 2016.12 IBM Business Process Manager 8.5.7.0 IBM Business Process Manager 8.5.6.0 CF2 IBM Business Process Manager 8.5.6.0 IBM Business Process Manager 8.5.5.0 IBM Business Process Manager 8.5.0.2 IBM Business Process Manager 8.5.0.0 IBM Business Process Manager 8.0.1.3 IBM Business Process Manager 8.0.1.1 IBM Business Process Manager 8.0.1.0 IBM Business Process Manager 8.0.0.0 IBM Business Process Manager 7.5.1.1 IBM Business Process Manager 7.5.1.0 |
| Not Vulnerable: | |
Discussion
IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
IBM Business Process Manager is prone to an open-redirect vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
The following products are affected :
IBM Business Process Manager 7.5.0.0 through 7.5.1.2
IBM Business Process Manager 8.0.0.0 through 8.0.1.3
IBM Business Process Manager 8.5.5.0
IBM Business Process Manager 8.5.0.0 through 8.5.0.2
IBM Business Process Manager 8.5.6.0 through 8.5.6.0 CF2
IBM Business Process Manager 8.5.7.0 through 8.5.7.0 Cumulative Fix 2016.12
IBM Business Process Manager is prone to an open-redirect vulnerability.
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
The following products are affected :
IBM Business Process Manager 7.5.0.0 through 7.5.1.2
IBM Business Process Manager 8.0.0.0 through 8.0.1.3
IBM Business Process Manager 8.5.5.0
IBM Business Process Manager 8.5.0.0 through 8.5.0.2
IBM Business Process Manager 8.5.6.0 through 8.5.6.0 CF2
IBM Business Process Manager 8.5.7.0 through 8.5.7.0 Cumulative Fix 2016.12
Exploit / POC
IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Business Process Manager CVE-2017-1159 Open Redirect Vulnerability
References:
References: