CVE:CVE-2011-1046
CNNVD:CNNVD-201102-301
IBM FileNet P8 Content Engine是 FileNet P8 平台的三大引擎之一。
用于FileNet P8 Content Manager(CM)和FileNet P8 Business Process Manager(BPM)中的IBM FileNet P8 Content Engine(又名P8CE)4.0.1至5.0.0版本没有为预设的Object Store修改请求PRIVILEGED_WRITE访问角色。远程攻击者可以借助未明向量改变对象的特权属性。
solution:Upgrade ibm filenet_p8_content_engine to a higher version than 4.0.1,4.0.1.10,4.0.1.11,4.0.1.12,4.0.1.13,4.5.0,4.5.0.2,4.5.1.3,4.5.1.4,4.5.1.5,4.5.1.6,5.0.0,and avoid the version 4.0.1,4.0.1.10,4.0.1.11,4.0.1.12,4.0.1.13,4.5.0,4.5.0.2,4.5.1.3,4.5.1.4,4.5.1.5,4.5.1.6,5.0.0; Upgrade ibm filenet_p8_business_process_manager to a higher version than *; Upgrade ibm filenet_p8_content_manager to a higher version than *