CVE-2015-7494

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API

published February 8, 2017

CVSS
—
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Published
2017-02-08T22:00Z
EPSS history
Timeline
  • 08 FEB 22:00Z
    A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API
    cvelistv5