CVE-2008-4581

Published: Oct 15, 2008Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.

Affected (1)

Products: Ibm: Enovia Smarteam

Ibm

1 product

Enovia Smarteam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Enovia Smarteam	Version 5

Related CWEs

CWE-264

References (10)

http://secunia.com/advisories/32105

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1

Source: cve@mitre.org

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/31748

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45943

Source: cve@mitre.org

http://secunia.com/advisories/32105