← Database

CVE-2006-7242

MEDIUM CVSS: 4.0 Published: 2010-09-20 Modified: 2026-06-16

Description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors.

Affected Platforms

Ibm Filenet P8 Application Engine

Weakness Type

CWE-264

References