Cross-Domain Resource Modification Vulnerability in IBM Cloud Orchestrator Services

CVE-2015-7494 · LOW Severity

AV:L/AC:L/AU:S/C:N/I:P/A:N

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.

Learn more about our Cis Benchmark Audit For Ibm I.