N/A

IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 122891.

N/A

N/A

IBM Business Process Manager 安全漏洞

IBM Business Process Manager（BPM）是美国IBM公司的一套综合的业务流程管理平台。该平台为业务的流程建模、组装、监控和部署提供了一系列的相关工具。 IBM BPM中存在开放重定向漏洞。远程攻击者可通过诱使用户访问特制的Web站点利用该漏洞将用户重定向到恶意的Web站点，实施钓鱼攻击，获取敏感信息。以下版本受到影响：IBM Business Process Manager 7.5.0.0版本至7.5.1.2版本，8.0.0.0版本至8.0.1.3版本，8.5.0.0版本至8.5

N/A

N/A