Lucene search
MitreCVE-2006-7242HistorySep 20, 2010 - 10:00 p.m.
CVE-2006-7242
2010-09-2022:00:02
CWE-264
mitre
web.nvd.nist.gov
18
ibm filenet
p8ae
workplace
access restrictions
cve-2006-7242
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
45.6%
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Affected configurations
Node
ibmfilenet_p8_application_engineMatch3.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:*:*:*:*:*:*:* |
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
45.6%
Related for CVE-2006-7242