Lucene search

K
cve[email protected]CVE-2010-3471
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3471

2022-10-0316:20:57
CWE-287
web.nvd.nist.gov
19
ibm
filenet
p8ae
vulnerability
cve-2010-3471
session hijacking

6.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.8%

Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

NVD
Node
ibmfilenet_p8_application_engineMatch4.0.2
OR
ibmfilenet_p8_application_engineMatch4.0.2001
OR
ibmfilenet_p8_application_engineMatch4.0.2002
OR
ibmfilenet_p8_application_engineMatch4.0.2003
OR
ibmfilenet_p8_application_engineMatch4.0.2004
OR
ibmfilenet_p8_application_engineMatch4.0.2005
OR
ibmfilenet_p8_application_engineMatch4.0.2006

6.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.8%

Related for CVE-2010-3471