Information Disclosure Vulnerability in IBM FileNet P8 Application Engine
CVE-2009-5002

Currently unrated

Key Information:

Vendor
WordPress
Status
Filenet P8 Application Engine
Vendor
CVE Published:
20 September 2010

Summary

The Workplace component of IBM FileNet P8 Application Engine versions prior to 4.0.2.1-P8AE-FP001 fails to log Get Content Failure Audit events. This oversight may enable remote attackers to access content without any detection or logging, thus creating a significant risk for unauthorized content exposure.

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PJ34853
vendor-advisoryx_refsource_AIXAPAR
http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/read...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.