IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/136150http://www.securityfocus.com/bid/103678http://www.ibm.com/support/docview.wss?uid=swg22011844http://www.securitytracker.com/id/1040622