CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the authoring tool in ibm web content manager (wcm) 6.1.5, and 7.0.0.1 before cf003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2011-05-26
Last Modified Date: 2011-05-26