2.1

CVE-2015-0146

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Content Collector Version 3.0.0.0
Ibm ≫ Content Collector Version 3.0.0.1
Ibm ≫ Content Collector Version 3.0.0.2
Ibm ≫ Content Collector Version 3.0.0.3
Ibm ≫ Content Collector Version 3.0.0.4
Ibm ≫ Content Collector Version 3.0.0.5
Ibm ≫ Content Collector Version 4.0.0.0
Ibm ≫ Content Collector Version 4.0.0.1
Ibm ≫ Content Collector Version 4.0.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.236
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21696594
Patch
Vendor Advisory