CVE:CVE-2008-4581
CNNVD:CNNVD-200810-276
IBM ENOVIA SmarTeam中的Editor, 远程认证用户可以通过Workflow 进程 (又称 Flow Process) view 来绕过预设的访问限制和读取文件对象。
solution:Upgrade ibm enovia_smarteam to a higher version than 5,and avoid the version 5