The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/45943http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1http://www.securityfocus.com/bid/31748http://secunia.com/advisories/32105
