PT-2011-2832 · Ibm · Ibm Filenet P8 Content Engine

Publicado 2011-02-21 · Atualizado 2017-08-17 · CVE-2011-1046

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Content Engine versions 4.0.1 through 5.0.0

Description The issue allows remote attackers to change a privileged property of an object via unspecified vectors because it does not require the PRIVILEGED WRITE access role for all intended Object Store modifications.

Recommendations For versions 4.0.1 through 5.0.0, ensure that the PRIVILEGED WRITE access role is required for all intended Object Store modifications to prevent unauthorized changes to privileged properties of objects.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1046

Produtos afetados

Ibm Filenet P8 Content Engine

Referências · 6

• http://secunia.com/advisories/43347 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1046 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65448 · Nota
• http://securityfocus.com/bid/46432 · Nota
• http://vupen.com/english/advisories/2011/0423 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21462438 · Nota