IBM FileNet Application Engine Workplace Component Administrator Role Security Bypass Vulnerability

Bugtraq ID:	43403
Class:	Design Error
CVE:	CVE-2006-7242
Remote:	Yes
Local:	No
Published:	Aug 01 2006 12:00AM
Updated:	Aug 01 2006 12:00AM
Credit:	Reported by the vendor.
Vulnerable:
Not Vulnerable:

IBM FileNet Application Engine Workplace Component Administrator Role Security Bypass Vulnerability

IBM FileNet Application Engine is prone to a security-bypass vulnerability because it fails to properly verify user roles.

Attackers may exploit this issue to bypass intended security restrictions. This may aid in further attacks.

Versions prior to IBM FileNet Application Engine 3.5.1-001 are vulnerable.

IBM FileNet Application Engine Workplace Component Administrator Role Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM FileNet Application Engine Workplace Component Administrator Role Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

IBM FileNet Application Engine Workplace Component Administrator Role Security Bypass Vulnerability

References:

• IBM FileNet Application Engine Homepage (IBM)
  
• IBM FileNet P8 Application Engine 3.5.1 Fix Pack Readme: P8AE 3.5.1-021 (IBM)