CVE-2011-1046

Published: Feb 21, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.

Affected (14)

Products: Ibm: Filenet P8 Content Engine, Filenet P8 Business Process Manager, Filenet P8 Content Manager

Ibm

3 products

Filenet P8 Content Engine

Filenet P8 Business Process Manager

Filenet P8 Content Manager

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ibm Filenet P8 Content Engine	Version 4.0.1.10
Ibm Filenet P8 Content Engine	Version 4.0.1.11
Ibm Filenet P8 Content Engine	Version 4.0.1.12
Ibm Filenet P8 Content Engine	Version 4.0.1.13
Ibm Filenet P8 Content Engine	Version 4.0.1
Ibm Filenet P8 Content Engine	Version 4.5.0.2
Ibm Filenet P8 Content Engine	Version 4.5.0
Ibm Filenet P8 Content Engine	Version 4.5.1.3
Ibm Filenet P8 Content Engine	Version 4.5.1.4
Ibm Filenet P8 Content Engine	Version 4.5.1.5
Ibm Filenet P8 Content Engine	Version 4.5.1.6
Ibm Filenet P8 Content Engine	Version 5.0.0
Ibm Filenet P8 Business Process Manager	All versions
Ibm Filenet P8 Content Manager	All versions