CVE-2008-7261

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-09-20 · updated 2026-06-16
Weakness: CWE-255

Description

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.

Affected products

IBM Filenet P8 Application Engine: 3.5.1, 3.5.1-001, 3.5.1-002, 3.5.1-003, 3.5.1-004, 3.5.1-005 (+4)

References

http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm

Get alerted when CVE-2008-7261 or the next vulnerability affects your stack