Security Advisory

CVE-2011-1046

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-02-21 17:00:00

Last updated 2024-08-06 22:14:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.

← Browse all CVEs View on cve.org ↗