Lucene search

K
nvd[email protected]NVD:CVE-2010-4806
HistoryMay 26, 2011 - 4:55 p.m.

CVE-2010-4806

2011-05-2616:55:04
CWE-264
web.nvd.nist.gov
3

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.0%

The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges.

Affected configurations

NVD
Node
ibmweb_content_managerMatch6.1.5
OR
ibmweb_content_managerMatch7.0.01cf002

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.0%

Related for NVD:CVE-2010-4806