CVE-2009-5001 - The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances

Back Back to CVE browser

MEDIUM

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances

Published Sep 20, 2010

4.0

MEDIUM

CVSS 2.0

EPSS 1.03%

Description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ35547
vendor-advisoryx_refsource_AIXAPAR

Link	Providers	Tags
http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm		x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1PJ35547		vendor-advisoryx_refsource_AIXAPAR

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 20, 2010

Updated Sep 16, 2024

Reserved Sep 20, 2010

Link CVE-2009-5001

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-5001

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-5001