CVEvulnerability
CVE-2010-2896
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.
Affected configurations
• ibm filenet content manager 4.0.0
• ibm filenet content manager 4.0.1
• ibm filenet content manager 4.5.0
• ibm filenet content manager 4.5.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/40614 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21441225 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1847 Vendor Advisory
- http://secunia.com/advisories/40614 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21441225 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1847 Vendor Advisory