Security Bulletin: IBM Content Collector affected by information disclosure vulnerability (CVE-2015-0146)

Summary IBM Content Collector for Email could allow a local attacker to obtain sensitive information, caused by improper handling of a search query. This error occurs only for searches on IBM FileNet P8 systems that are configured with IBM Content Search Services. Vulnerability Details CVEID:...

CVE-2015-0146

IBM Content Collector for Email (3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001) is affected by an information-disclosure vulnerability due to improper handling of an unspecified query operator when searching IBM FileNet P8 systems via IBM Content Search Servi...

PT-2015-4504

Name of the Vulnerable Software and Affected Versions IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001 IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001 Description The issue allows local users to bypass intended document-access...