CVE-2010-2896

CVE-2010-2896 affects IBM FileNet Content Manager (CM) versions 4.0.0, 4.0.1, 4.5.0, and 4.5.1 prior to FP4. The root cause is improper handling of the InheritParentPermissions setting during an upgrade from 3.x, which may allow an attacker to bypass intended folder permissions via unspecified ve...