CVE-2006-7241 | BDVDB-2026-43334 Detail

Description#

The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-09-20Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.