Lucene search

MitreCVE-2009-5001

HistorySep 20, 2010 - 10:00 p.m.

CVE-2009-5001

2010-09-2022:00:03

CWE-264

mitre

web.nvd.nist.gov

ibm

filenet

p8ae

cve-2009-5001

security bypass

access restriction

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

45.6%

JSON

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document’s Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

Affected configurations

Nvd

Node

ibmfilenet_p8_application_engineMatch4.0.2

ibmfilenet_p8_application_engineMatch4.0.2001

VendorProductVersionCPE
ibmfilenet_p8_application_engine4.0.2cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:*:*:*:*:*:*:*
ibmfilenet_p8_application_engine4.0.2cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:001:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	filenet_p8_application_engine	4.0.2	cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:::::::*
ibm	filenet_p8_application_engine	4.0.2	cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:001::::::

References

download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm

www-01.ibm.com/support/docview.wss?uid=swg1PJ35547

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

45.6%

JSON

Related for CVE-2009-5001