Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Pablo Gaston Milano

Pesquisador deCYBSEC S.A. Security Systems
#23759de 53,635
10CVSS total
Vulnerabilidades · 1
PT-2008-2279
10
2008-02-07
Emc · Emc Documentum Administrator · CVE-2008-0656
**Name of the Vulnerable Software and Affected Versions** EMC Documentum Administrator version 5.3.0.313 EMC Documentum Webtop version 5.3.0.317 **Description** The issue allows remote attackers to overwrite arbitrary files via the `filename` attribute in the dmclTrace.jsp file. This can be exploited by uploading files with malicious intent. **Recommendations** For EMC Documentum Administrator version 5.3.0.313, restrict access to the dmclTrace.jsp file to prevent unauthorized file uploads. For EMC Documentum Webtop version 5.3.0.317, restrict access to the dmclTrace.jsp file to prevent unauthorized file uploads. As a temporary workaround, consider disabling the file upload functionality in the dmclTrace.jsp file until a patch is available.