Vulnerability in Ibm Filenet P8 Application Engine
CVE-2009-4998
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.
Affected products
- Ibm Filenet_p8_application_engine — versions 4.0.2, 3.5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- cve@mitre.org (x_refsource_CONFIRM)