CVE-2021-26882

Remote Access API Elevation of Privilege Vulnerability...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent existing access restrictions.

The vulnerability of the REST API interface of the Business Process Manager system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...