CVE-2009-5001

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control…

published September 20, 2010

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2010-09-20T21:00Z
EPSS history
Timeline
  • 20 SEP 21:00Z
    The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control…
    cvelistv5