CVE-2010-2896

IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2010-07-28

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Filenet Content Manager (Ibm)

References

• http://secunia.com/advisories/40614
• http://www-01.ibm.com/support/docview.wss?uid=swg21441225
• http://www.vupen.com/english/advisories/2010/1847