« Volver al listado

CVE-2009-4998

Estado: ModificadaBaja (2.6)—

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Filenet P8 Application Engine

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-4998",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-09-20T22:00:02.750",
  "references": [
    {
      "url": "http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PJ36552",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PJ36552",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El componente Workplace (también conocido como WP) en IBM FileNet P8 Application Engine (P8AE) v3.5.1 anteriores a v3.5.1-019 y v4.0.2.x anteriores a v4.0.2.7-P8AE-FP007, con ciertas configuraciones de FileTracker, no aplican las políticas de seguridad al primer documento añadido durante una sesión, lo que podría permitir a atacantes remoto evitar las restricciones de acceso a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:14:47.977",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "042B8E1F-53A6-49A6-814F-7790DBD174D6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3347EB2A-C29E-4387-8BDC-944BC582F80E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3D0C7FA-A354-47DF-89E3-1FDFE4271C31"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48F60761-7704-4E65-8C26-C2B658ABA675"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24BCFEFA-2325-49D7-8EEF-D86D58B01D5C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56BC4476-C11A-46D5-8AE9-3D90A45ADDB0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A339F6F-257C-4A87-85EC-9146A9DD4AFD"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F863ECEF-CC77-4FC9-B835-0C08D3FF466C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:008:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0C8B0DA-B6C1-487C-8604-29AFE65D6FCF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:009:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95954D6E-AF00-4F4B-A9DE-6C4412DAA175"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:010:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9180D1E6-41D0-44C8-905A-80B0203878F3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:011:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1140E1A9-ABD1-481C-9DF2-2FE996C83631"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:012:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5440D864-A51D-4876-AD1D-86772058AE63"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:013:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B1E248A-4AD1-410D-891A-7805B159C276"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:014:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "710E9E90-3E1A-47EF-A61B-BB6D1E0DB12B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:015:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1994F5D-A5E5-4887-9D9A-B89648FEDC87"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:016:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFF4C9DF-2064-4B87-9348-4E93A3C33385"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:017:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2FD171D-4317-4018-B77C-20154F319A74"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:018:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE76233D-65DA-4EB7-B6F5-AA22B5B798FC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:019:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53CD5D90-3ED4-452A-9C72-DFA425622AC8"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE07D556-C02C-498C-AFEF-6A6A99B2B639"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9AEEBC1-FA35-46E6-BFF2-A86B4D75682A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C453B707-7A97-4ACF-94A9-FCC9BB26314B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF158085-1490-4988-95A2-300149441E62"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CE407F1-70F8-4C55-994E-5FC27563B66D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "594F25EC-8328-4277-B533-5B3123DDEB9B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5B58BE8-775E-4090-87C9-B031D5329854"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}