CVE-2009-4998
20.09.2010, 22:00
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | filenet_p8_application_engine | 3.5.1 |
| ibm | filenet_p8_application_engine | 3.5.1:001 |
| ibm | filenet_p8_application_engine | 3.5.1:002 |
| ibm | filenet_p8_application_engine | 3.5.1:003 |
| ibm | filenet_p8_application_engine | 3.5.1:004 |
| ibm | filenet_p8_application_engine | 3.5.1:005 |
| ibm | filenet_p8_application_engine | 3.5.1:006 |
| ibm | filenet_p8_application_engine | 3.5.1:007 |
| ibm | filenet_p8_application_engine | 3.5.1:008 |
| ibm | filenet_p8_application_engine | 3.5.1:009 |
| ibm | filenet_p8_application_engine | 3.5.1:010 |
| ibm | filenet_p8_application_engine | 3.5.1:011 |
| ibm | filenet_p8_application_engine | 3.5.1:012 |
| ibm | filenet_p8_application_engine | 3.5.1:013 |
| ibm | filenet_p8_application_engine | 3.5.1:014 |
| ibm | filenet_p8_application_engine | 3.5.1:015 |
| ibm | filenet_p8_application_engine | 3.5.1:016 |
| ibm | filenet_p8_application_engine | 3.5.1:017 |
| ibm | filenet_p8_application_engine | 3.5.1:018 |
| ibm | filenet_p8_application_engine | 3.5.1:019 |
| ibm | filenet_p8_application_engine | 4.0.2 |
| ibm | filenet_p8_application_engine | 4.0.2:001 |
| ibm | filenet_p8_application_engine | 4.0.2:002 |
| ibm | filenet_p8_application_engine | 4.0.2:003 |
| ibm | filenet_p8_application_engine | 4.0.2:004 |
| ibm | filenet_p8_application_engine | 4.0.2:005 |
| ibm | filenet_p8_application_engine | 4.0.2:006 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References