NVD

Id
8028  
Name
CVE-2011-1046  
Description
IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-02-21  
Modified Date
2011-02-22  
Seq
2011-1046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45734 8028 CVE-2011-1046 http://www-01.ibm.com/support/docview.wss?uid=swg21462438  View
45735 8028 CVE-2011-1046 46432  View
45736 8028 CVE-2011-1046 ADV-2011-0423  View
45737 8028 CVE-2011-1046 ibm-filenet-contentengine-sec-bypass(65448)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34064 JVNDB-2011-004306 FileNet P8 CM および FileNet P8 BPM で使用される IBM FileNet P8 Content Engine における権限昇格の脆弱性 FileNet P8 Content Manager (CM) および FileNet P8 Business Process Manager (BPM) で使用される IBM FileNet P8 Content Engine は、全ての Object Store 変更に対する PRIVILEGED_WRITE アクセスロールを要求しないため、オブジェクトの特権プロパティを変更される脆弱性が存在します。 CVE-2011-1046 48953 CVE-2011-1046 8028 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004306.html 2011-02-21 2012-03-27 View