CVE-2016-0349: Improper Access Control

IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call...

PT-2016-2295

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 8.5.6 through 8.5.6.2 IBM Business Process Manager versions 8.5.7 before 8.5.7.CF201606 Description The issue is related to inadequate access control in the system, allowing remote authenticated users to...