VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 13, 2015· Updated Jun 17, 2026

CVE-2014-6139

CVE-2014-6139

Description

The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Business Process Manager4 versions
    cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.0.1.3, 8.5.0.1, 8.5.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.