CVE-2008-4581

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-15 · updated 2026-06-16
Weakness: CWE-264

Description

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.

Affected products

IBM Enovia Smarteam: 5

References

http://secunia.com/advisories/32105
http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1
http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425
http://www.securityfocus.com/bid/31748
https://exchange.xforce.ibmcloud.com/vulnerabilities/45943
http://secunia.com/advisories/32105
http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1
http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425
http://www.securityfocus.com/bid/31748
https://exchange.xforce.ibmcloud.com/vulnerabilities/45943

Get alerted when CVE-2008-4581 or the next vulnerability affects your stack