Security Advisory

CVE-2015-0146

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-03-18 10:00:00

Last updated 2024-08-06 04:03:09

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query.

← Browse all CVEs View on cve.org ↗