CVE-2009-5001
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
45.6%
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document’s Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | filenet_p8_application_engine | 4.0.2 | cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:*:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 4.0.2 | cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:001:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
45.6%