VulnerabilityModified
CVE-2008-4581
The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.
MEDIUM 4.0EPSS 1.02%
Does this matter?
Lower severity and a low EPSS score (1.02%). Track it; it rarely justifies an emergency change on its own.
Description
The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.02% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/enovia smarteam
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32105Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425Vendor Advisory
- http://www.securityfocus.com/bid/31748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45943
- http://secunia.com/advisories/32105Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425Vendor Advisory
- http://www.securityfocus.com/bid/31748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45943
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.