CVE-2009-1953
- State
- Published
- Severity
- Not scored
- Published
- Jun 6, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jun 6, 2009
Description
IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35228vdb-entry
- 35347third-party-advisory
- ADV-2009-1512vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21389281
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.