IBM FileNet Products Content Engine Security Bypass Vulnerability

Bugtraq ID:	46432
Class:	Unknown
CVE:	CVE-2011-1046
Remote:	Yes
Local:	No
Published:	Feb 17 2011 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	IBM
Vulnerable:	IBM FileNet P8RE 5.0 IBM FileNet P8RE 4.5.1 IBM FileNet P8RE 4.5 IBM FileNet P8RE 4.0.1
Not Vulnerable:

IBM FileNet Products Content Engine Security Bypass Vulnerability

IBM FileNet Content Manager and Business Process Manager are prone to a security-bypass vulnerability that affects the content engine.

Successful exploits may allow attackers to bypass certain security restrictions and modify some properties of certain objects in the Object Store.

The vulnerability affects the following Content Engine releases:

P8CE 5.0.0 at the GA base level
P8CE 4.5.1 at any level
P8CE 4.5.0 at any level
P8CE 4.0.1 at any level

IBM FileNet Products Content Engine Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM FileNet Products Content Engine Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM FileNet Products Content Engine Security Bypass Vulnerability

References:

• A security vulnerability with the IBM FileNet Content Engine has been identified (IBM)
  
• FileNet Content Manager Homepage (IBM)