Unrated severityNVD Advisory· Published Jun 8, 2009· Updated Apr 23, 2026
CVE-2009-1953
CVE-2009-1953
Description
IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.
Affected products
3cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:filenet_content_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:filenet_content_manager:4.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- secunia.com/advisories/35347nvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/35228nvd
- www.vupen.com/english/advisories/2009/1512nvd
News mentions
0No linked articles in our index yet.