CVE-2008-4581

Опубликовано: 15 окт. 2008

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.

Ссылки

http://secunia.com/advisories/32105
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425
Vendor Advisory
http://www.securityfocus.com/bid/31748
https://exchange.xforce.ibmcloud.com/vulnerabilities/45943
http://secunia.com/advisories/32105
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425
Vendor Advisory
http://www.securityfocus.com/bid/31748
https://exchange.xforce.ibmcloud.com/vulnerabilities/45943

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:enovia_smarteam:5:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.002

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-5x5v-mm9r-g2xm

github

почти 4 года назад