PT-2015-4504

CVE-2015-0146

·

Publicado

2015-03-18

·

Atualizado

2015-03-18

Descrição por

CVSS 2.0
2.1
Baixa
MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001 IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001
Description The issue allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query, due to improper handling of an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services.
Recommendations For IBM Content Collector for Email versions 3.0 through 3.0.0.6-IBM-ICC-Server-IF001, update to version 3.0.0.6-IBM-ICC-Server-IF001 or later. For IBM Content Collector for Email versions 4.0 through 4.0.0.3-IBM-ICC-Server-IF001, update to version 4.0.0.3-IBM-ICC-Server-IF001 or later.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2015-0146
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com