Vulnerability in Ibm Openpages_grc_platform

CVE-2015-0141

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a JSON request.

EPSS: 0.011 (63.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Openpages_grc_platform — versions 6.2.0.0, 6.2.1.0, 6.2.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)