CVE-2011-1046

Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Content Engine versions 4.0.1 through 5.0.0

Description The issue allows remote attackers to change a privileged property of an object via unspecified vectors because it does not require the PRIVILEGED WRITE access role for all intended Object Store modifications.

Recommendations For versions 4.0.1 through 5.0.0, ensure that the PRIVILEGED WRITE access role is required for all intended Object Store modifications to prevent unauthorized changes to privileged properties of objects.