What is the severity of CVE-2006-7241?

CVE-2006-7241 is considered a medium severity vulnerability due to potential unauthorized access granted to authenticated users.

How do I fix CVE-2006-7241?

To mitigate CVE-2006-7241, update IBM FileNet P8 Application Engine to version 3.5.1-002 or later.

Who is affected by CVE-2006-7241?

CVE-2006-7241 affects users of IBM FileNet P8 Application Engine version 3.5.1 and 3.5.1-001.

What kind of attack does CVE-2006-7241 allow?

CVE-2006-7241 may allow remote authenticated users to bypass access restrictions in certain conditions.

Is there a workaround for CVE-2006-7241?

There are no official workarounds for CVE-2006-7241, and it is recommended to apply the patch as soon as possible.

Vulnerability/
CVE-2006-7241

medium

CWE

264

20/9/2010

21/9/2010

CVE-2006-7241

First published: Mon Sep 20 2010(Updated: )

The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
IBM FileNet P8 Application Engine	=3.5.1
IBM FileNet P8 Application Engine	=3.5.1-001

Never miss a vulnerability like this again

Reference Links

http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm

Frequently Asked Questions

What is the severity of CVE-2006-7241?
CVE-2006-7241 is considered a medium severity vulnerability due to potential unauthorized access granted to authenticated users.
How do I fix CVE-2006-7241?
To mitigate CVE-2006-7241, update IBM FileNet P8 Application Engine to version 3.5.1-002 or later.
Who is affected by CVE-2006-7241?
CVE-2006-7241 affects users of IBM FileNet P8 Application Engine version 3.5.1 and 3.5.1-001.
What kind of attack does CVE-2006-7241 allow?
CVE-2006-7241 may allow remote authenticated users to bypass access restrictions in certain conditions.
Is there a workaround for CVE-2006-7241?
There are no official workarounds for CVE-2006-7241, and it is recommended to apply the patch as soon as possible.

agent/severity
agent/weakness
agent/references
agent/author
agent/description
agent/type
agent/event
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/tags
collector/nvd-historical
vendor/ibm
product/filenet p8 application engine
canonical/ibm filenet p8 application engine
agent/software-canonical-lookup-request
collector/nvd-index
version/ibm filenet p8 application engine/3.5.1
version/ibm filenet p8 application engine/3.5.1-001

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2006-7241?
CVE-2006-7241 is considered a medium severity vulnerability due to potential unauthorized access granted to authenticated users.
How do I fix CVE-2006-7241?
To mitigate CVE-2006-7241, update IBM FileNet P8 Application Engine to version 3.5.1-002 or later.
Who is affected by CVE-2006-7241?
CVE-2006-7241 affects users of IBM FileNet P8 Application Engine version 3.5.1 and 3.5.1-001.
What kind of attack does CVE-2006-7241 allow?
CVE-2006-7241 may allow remote authenticated users to bypass access restrictions in certain conditions.
Is there a workaround for CVE-2006-7241?
There are no official workarounds for CVE-2006-7241, and it is recommended to apply the patch as soon as possible.