| Package | Affected versions | Patched versions |
|---|---|---|
| cloud orchestrator | = 2.4= 2.4.0.1= 2.4.0.2= 2.4.0.3= 2.5= 2.5.01 | |
| smartcloud orchestrator | = 2.3= 2.3.0.1 |
A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free