CVE-2015-7455

Published: Feb 29, 2016Modified: May 6, 2026

3.1

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.6 / Impact: 1.4

Source: NVD

Description

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.

Affected (6)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 7.0.0.0
Ibm Websphere Portal	Version 7.0.0.1
Ibm Websphere Portal	Version 7.0.0.2
Ibm Websphere Portal	Version 8.0.0.0
Ibm Websphere Portal	Version 8.0.0.1
Ibm Websphere Portal	Version 8.5.0.0

Related CWEs

CWE-264

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21975358

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ibm.com/support/docview.wss?uid=swg21975358

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.