IBM FileNet Content Manager Folder Permission Vulnerability
CVE-2010-2896

Currently unrated

Key Information:

Vendor
IBM
Status
Filenet Content Manager
Vendor
CVE Published:
28 July 2010

Summary

IBM FileNet Content Manager versions 4.0.0, 4.0.1, 4.5.0, and 4.5.1 prior to FP4 have a vulnerability that arises from improper handling of the InheritParentPermissions setting during upgrades from version 3.x. This flaw could allow unauthorized users to bypass the intended folder permissions and access restricted content through unspecified means, potentially leading to data exposure and integrity issues.

References

http://www.vupen.com/english/advisories/2010/1847
vdb-entryx_refsource_VUPEN
http://www-01.ibm.com/support/docview.wss?uid=swg21441225
x_refsource_CONFIRM
http://secunia.com/advisories/40614
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.