VulnerabilityModified
CVE-2010-2896
IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.
MEDIUM 4.3EPSS 0.91%
Does this matter?
Lower severity and a low EPSS score (0.91%). Track it; it rarely justifies an emergency change on its own.
Description
IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.91% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/filenet content manager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/40614Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21441225Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1847Vendor Advisory
- http://secunia.com/advisories/40614Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21441225Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1847Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.