NVD

Id
14327  
Name
CVE-2010-2896  
Description
IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-07-28  
Modified Date
2010-07-29  
Seq
2010-2896  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79254 14327 CVE-2010-2896 http://www-01.ibm.com/support/docview.wss?uid=swg21441225  View
79255 14327 CVE-2010-2896 ADV-2010-1847  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39190 JVNDB-2010-004975 IBM FileNet CM におけるフォルダのパーミッションを回避される脆弱性 IBM FileNet Content Manager (CM) は、3.x からのアップグレード際に、InheritParentPermissions 設定を適切に管理しないため、フォルダのパーミッションを回避される脆弱性が存在します。 CVE-2010-2896 45476 CVE-2010-2896 14327 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004975.html 2010-07-19 2012-09-25 View