CVE-2015-0146

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified…

published March 18, 2015

CVSS
—
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.7th percentile
Published
2015-03-18T10:00Z
EPSS history
Timeline
  • 18 MAR 10:00Z
    IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified…
    cvelistv5