CVE Vulnerabilities

CVE-2006-7241

Published: Sep 20, 2010 | Modified: Sep 21, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

Affected Software

Name Vendor Start Version End Version
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1

References