FICHE CVE

CVE-2015-7494

Publiée le 2017-02-08 · Dernière modification le 2026-06-17

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.

CVSS 3.02.8 FAIBLE

Type de faiblesse

Contrôle d'accès incorrect · CWE-284