CVE-2009-4998 | BDVDB-2026-43337 Detail

Description#

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-09-20Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.