Unrated severityNVD Advisory· Published Jun 8, 2009· Updated Jun 16, 2026
CVE-2009-1953
CVE-2009-1953
Description
IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:filenet_content_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:filenet_content_manager:4.5:*:*:*:*:*:*:*
- (no CPE)range: 4.0, 4.0.1, 4.5
Patches
Vulnerability mechanics
References
4- secunia.com/advisories/35347nvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/35228nvd
- www.vupen.com/english/advisories/2009/1512nvd
News mentions
0No linked articles in our index yet.