CVE Vulnerabilities

CVE-2008-7261

Published: Sep 20, 2010 | Modified: Sep 21, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.

Affected Software

Name Vendor Start Version End Version
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1
Filenet_p8_application_engine Ibm 3.5.1 3.5.1

References