PT-2010-4076 · Ibm · Ibm Filenet P8 Business Process Manager+3

Publicado 2010-06-30 · Atualizado 2017-08-17 · CVE-2010-2518

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Content Manager (CM) versions 4.5.1 before FP3 IBM FileNet P8 Business Process Manager (BPM) versions 4.5.1 before FP3 P8 Content Engine (P8CE) versions 4.5.1 before FP3 P8 Content Search Engine (P8CSE) versions prior to 4.5.0 FP3 and 4.5.1 before FP1

Description The issue allows remote attackers to gain privileges via unknown vectors.

Recommendations For IBM FileNet P8 Content Manager (CM) version 4.5.1, update to at least FP3. For IBM FileNet P8 Business Process Manager (BPM) version 4.5.1, update to at least FP3. For P8 Content Engine (P8CE) version 4.5.1, update to at least FP3. For P8 Content Search Engine (P8CSE) versions prior to 4.5.0 FP3, update to at least 4.5.0 FP3. For P8 Content Search Engine (P8CSE) version 4.5.1, update to at least FP1.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2518

Produtos afetados

Ibm Filenet P8 Business Process Manager

Ibm Filenet P8 Content Manager

P8 Content Engine

P8 Content Search Engine

Referências · 7

• http://vupen.com/english/advisories/2010/1616 · Aviso do Fabricante
• http://securityfocus.com/bid/41177 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21438487 · Aviso do Fabricante
• http://secunia.com/advisories/40413 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59792 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2518 · Nota de Segurança
• http://osvdb.org/65804 · Nota