PT-2017-7206

Name of the Vulnerable Software and Affected Versions IBM Cloud Orchestrator affected versions not specified Description A security issue allows an authenticated domain admin user to potentially modify cross-domain resources. This can be achieved by making a call to the "/services/action/launch"...

CVE-2015-7494: Improper Access Control

A vulnerability has been identified in IBM Cloud Orchestrator services/action/launch API. An authenticated domain admin user might modify cross domain resources via a /services/action/launch API call, provided it would have been possible for the domain admin user to gain access to a resource...