Description
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.
References (1)
Core 1
Core References
Various Sources x_refsource_confirm
http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
Scores
EPSS
0.0035
EPSS Percentile
27.1%
Details
CWE
CWE-255
Status
published
Products (1)
ibm/filenet_p8_application_engine
3.5.1 (10 CPE variants)
Published
Sep 20, 2010
Tracked Since
Feb 18, 2026