PT-2010-1805 · Ibm · Ibm Filenet P8 Application Engine

Published 2010-09-20 · Updated 2010-09-21 · CVE-2009-5002

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Application Engine (P8AE) versions 4.0.2.x through 4.0.2.x before 4.0.2.1-P8AE-FP001

Description The issue concerns the Workplace component in IBM FileNet P8 Application Engine, where it fails to record Get Content Failure Audit events. This could potentially allow remote attackers to attempt accessing content without being detected.

Recommendations For versions 4.0.2.x before 4.0.2.1-P8AE-FP001, update to version 4.0.2.1-P8AE-FP001 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-5002

Affected Products

Ibm Filenet P8 Application Engine

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-5002 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PJ34853 · Vendor Advisory
• http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm · Note