PT-2015-4504
CVE-2015-0146
·
تاريخ النشر
2015-03-18
·
تاريخ التحديث
2015-03-18
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001
IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001
Description
The issue allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query, due to improper handling of an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services.
Recommendations
For IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001, update to version 3.0.0.6-IBM-ICC-Server-IF001 or later.
For IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001, update to version 4.0.0.3-IBM-ICC-Server-IF001 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾