CVE-2023-47716: IBM FileNet Content Manager privilege escalation

Reference Links

• https://www.ibm.com/support/pages/node/7078780 (Advisory)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/271656

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7078780

Frequently Asked Questions

• What is the severity of CVE-2023-47716?

  CVE-2023-47716 is classified as a moderate severity vulnerability that may allow unauthorized privilege escalation.

• How do I fix CVE-2023-47716?

  To remediate CVE-2023-47716, upgrade IBM FileNet Content Manager or CP4BA - Filenet Content Manager to the latest versions as recommended by IBM.

• What versions of IBM FileNet Content Manager are affected by CVE-2023-47716?

  CVE-2023-47716 affects IBM FileNet Content Manager versions 5.5.8.0, 5.5.10.0, and 5.5.11.0.

• Can CVE-2023-47716 allow a user to impersonate another user?

  Yes, CVE-2023-47716 may allow a user to gain the privileges of another user under unusual circumstances.

• Is CVE-2023-47716 documented by IBM?

  Yes, CVE-2023-47716 is documented by IBM and includes mitigation strategies for affected users.