Design/Logic Flaw

2010-09-2022:00:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

CPENameOperatorVersion
filenet_p8_application_engineeq3.5.1 9
filenet_p8_application_engineeq3.5.1 11
filenet_p8_application_engineeq3.5.1 5
filenet_p8_application_engineeq3.5.1 14
filenet_p8_application_engineeq3.5.1 6
filenet_p8_application_engineeq3.5.1 13
filenet_p8_application_engineeq3.5.1 16
filenet_p8_application_engineeq3.5.1 4
filenet_p8_application_engineeq3.5.1
filenet_p8_application_engineeq3.5.1 18

Name	Operator	Version
filenet_p8_application_engine	eq	3.5.1 9
filenet_p8_application_engine	eq	3.5.1 11
filenet_p8_application_engine	eq	3.5.1 5
filenet_p8_application_engine	eq	3.5.1 14
filenet_p8_application_engine	eq	3.5.1 6
filenet_p8_application_engine	eq	3.5.1 13
filenet_p8_application_engine	eq	3.5.1 16
filenet_p8_application_engine	eq	3.5.1 4
filenet_p8_application_engine	eq	3.5.1
filenet_p8_application_engine	eq	3.5.1 18