PT-2010-4076 · Ibm · Ibm Filenet P8 Business Process Manager+3

Published 2010-06-30 · Updated 2017-08-17 · CVE-2010-2518

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Content Manager (CM) versions 4.5.1 before FP3 IBM FileNet P8 Business Process Manager (BPM) versions 4.5.1 before FP3 P8 Content Engine (P8CE) versions 4.5.1 before FP3 P8 Content Search Engine (P8CSE) versions prior to 4.5.0 FP3 and 4.5.1 before FP1

Description The issue allows remote attackers to gain privileges via unknown vectors.

Recommendations For IBM FileNet P8 Content Manager (CM) version 4.5.1, update to at least FP3. For IBM FileNet P8 Business Process Manager (BPM) version 4.5.1, update to at least FP3. For P8 Content Engine (P8CE) version 4.5.1, update to at least FP3. For P8 Content Search Engine (P8CSE) versions prior to 4.5.0 FP3, update to at least 4.5.0 FP3. For P8 Content Search Engine (P8CSE) version 4.5.1, update to at least FP1.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2518

Affected Products

Ibm Filenet P8 Business Process Manager

Ibm Filenet P8 Content Manager

P8 Content Engine

P8 Content Search Engine

References · 7

• http://vupen.com/english/advisories/2010/1616 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21438487 · Vendor Advisory
• http://secunia.com/advisories/40413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2518 · Security Note
• http://securityfocus.com/bid/41177 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59792 · Note
• http://osvdb.org/65804 · Note