CVE-2009-4998

CWE-2643 documents3 sources
Severity
2.6LOW
EPSS
0.2%
top 63.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Filenet P8 Application Engine
Timeline
PublishedSep 20
Latest updateMay 2

Description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-j3w4-fp9w-qmr4: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3↗2022-05-02
▶
CVEList
CVE-2009-4998: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3↗2010-09-20
▶
CVE-2009-4998 (LOW CVSS 2.6) | The Workplace (aka WP) component in | cvebase.io