The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Filenet_p8_application_engine | Ibm | 3.5.1 (including) | 3.5.1 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-001 (including) | 3.5.1-001 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-002 (including) | 3.5.1-002 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-003 (including) | 3.5.1-003 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-004 (including) | 3.5.1-004 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-005 (including) | 3.5.1-005 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-006 (including) | 3.5.1-006 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-007 (including) | 3.5.1-007 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-008 (including) | 3.5.1-008 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-009 (including) | 3.5.1-009 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-010 (including) | 3.5.1-010 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-011 (including) | 3.5.1-011 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-012 (including) | 3.5.1-012 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-013 (including) | 3.5.1-013 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-014 (including) | 3.5.1-014 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-015 (including) | 3.5.1-015 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-016 (including) | 3.5.1-016 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-017 (including) | 3.5.1-017 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-018 (including) | 3.5.1-018 (including) |
| Filenet_p8_application_engine | Ibm | 3.5.1-019 (including) | 3.5.1-019 (including) |