NVD

Id
52113  
Name
CVE-2009-4998  
Description
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2010-09-20  
Modified Date
2010-09-21  
Seq
2009-4998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263127 52113 CVE-2009-4998 http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm  View
263128 52113 CVE-2009-4998 http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm  View
263129 52113 CVE-2009-4998 PJ36552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37119 JVNDB-2010-002904 IBM FileNet P8AE の Workplace コンポーネントにおけるアクセス制限を回避する脆弱性 IBM FileNet P8 Application Engine (P8AE) の Workplace コンポーネントは、特定の FileTracker 設定において、セッション中に追加された最初のドキュメントにセキュリティポリシーを適用しないため、アクセス制限を回避する脆弱性が存在します。 CVE-2009-4998 42429 CVE-2009-4998 52113 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002904.html 2010-09-20 2012-03-27 View