Lucene search

[email protected]CVE-2011-1046

HistoryFeb 21, 2011 - 6:00 p.m.

CVE-2011-1046

2011-02-2118:00:01

CWE-264

[email protected]

web.nvd.nist.gov

ibm

filenet

p8ce

p8 content engine

content manager

bpm

remote attackers

cve-2011-1046

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.

Affected configurations

NVD

Node

ibmfilenet_p8_content_engineMatch4.0.1

ibmfilenet_p8_content_engineMatch4.0.1.10

ibmfilenet_p8_content_engineMatch4.0.1.11

ibmfilenet_p8_content_engineMatch4.0.1.12

ibmfilenet_p8_content_engineMatch4.0.1.13

ibmfilenet_p8_content_engineMatch4.5.0

ibmfilenet_p8_content_engineMatch4.5.0.2

ibmfilenet_p8_content_engineMatch4.5.1.3

ibmfilenet_p8_content_engineMatch4.5.1.4

ibmfilenet_p8_content_engineMatch4.5.1.5

ibmfilenet_p8_content_engineMatch4.5.1.6

ibmfilenet_p8_content_engineMatch5.0.0

AND

ibmfilenet_p8_business_process_manager

ibmfilenet_p8_content_manager

CPENameOperatorVersion
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.0.1
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.0.1.10
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.0.1.11
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.0.1.12
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.0.1.13
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.5.0
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.5.0.2
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.5.1.3
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.5.1.4
ibm:filenet_p8_content_engineibm filenet p8 content engineeq4.5.1.5

CPE	Name	Operator	Version
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.0.1
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.0.1.10
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.0.1.11
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.0.1.12
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.0.1.13
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.5.0
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.5.0.2
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.5.1.3
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.5.1.4
ibm:filenet_p8_content_engine	ibm filenet p8 content engine	eq	4.5.1.5

Rows per page:

1-10 of 141

References

secunia.com/advisories/43347

www-01.ibm.com/support/docview.wss?uid=swg21462438

www.securityfocus.com/bid/46432

www.vupen.com/english/advisories/2011/0423

exchange.xforce.ibmcloud.com/vulnerabilities/65448

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for CVE-2011-1046

prion1 cvelist1 nvd1