CVE-2008-0402

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-23 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members of the repository's owning group.

Affected products

IBM Websphere Business Modeler: 6.0.2_1

References

http://secunia.com/advisories/28586
http://www-1.ibm.com/support/docview.wss?uid=swg24018060
http://www-1.ibm.com/support/docview.wss?uid=swg24018061
http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only
http://www.securityfocus.com/bid/27389
http://www.securitytracker.com/id?1019252
http://www.vupen.com/english/advisories/2008/0254
https://exchange.xforce.ibmcloud.com/vulnerabilities/39830
http://secunia.com/advisories/28586
http://www-1.ibm.com/support/docview.wss?uid=swg24018060
http://www-1.ibm.com/support/docview.wss?uid=swg24018061
http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only

Get alerted when CVE-2008-0402 or the next vulnerability affects your stack