CVE-2009-4998 - The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors

Back Back to CVE browser

LOW

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors

Published Sep 20, 2010

2.6

LOW

CVSS 2.0

EPSS 1.08%

Description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
x_refsource_CONFIRM
http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ36552
vendor-advisoryx_refsource_AIXAPARVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4960
Advisory

Link	Providers	Tags
http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm		x_refsource_CONFIRM
http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm		x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ36552		vendor-advisoryx_refsource_AIXAPARVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4960		Advisory