IBM FileNet Content Manager Rendition Engine Unspecified Security Bypass Vulnerability

Bugtraq ID:	46424
Class:	Unknown
CVE:	CVE-2011-1045
Remote:	Yes
Local:	No
Published:	Feb 16 2011 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	IBM
Vulnerable:	IBM FileNet P8RE 4.5.1 IBM FileNet P8RE 4.5 IBM FileNet P8RE 4.0.1
Not Vulnerable:

IBM FileNet Content Manager Rendition Engine Unspecified Security Bypass Vulnerability

IBM FileNet Content Manager is prone to a security-bypass vulnerability that affects the 'Rendition Engine'.

Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions.

The vulnerability affects the following components of the IBM FileNet P8 Content Manager (CM):

P8RE 4.5.1 at the GA base level
P8RE 4.5.0 at the GA base level
P8RE 4.0.1 at the GA base level, Interim Fix 001 level, and Interim Fix 002 level

IBM FileNet Content Manager Rendition Engine Unspecified Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM FileNet Content Manager Rendition Engine Unspecified Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM FileNet Content Manager Rendition Engine Unspecified Security Bypass Vulnerability

References:

• FileNet Content Manager Homepage (IBM)
  
• A security vulnerability with the IBM FileNet Rendition Engine has been identifi (IBM)