PT-2014-3718 · Emc · Emc Documentum Foundation Services

Publicado 2014-02-06 · Atualizado 2018-01-03 · CVE-2014-0622

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum Foundation Services (DFS) versions 6.5 through 6.7 before 6.7 SP1 P22 EMC Documentum Foundation Services (DFS) version 6.7 SP2 before P08 EMC Documentum Foundation Services (DFS) version 7.0 before P12 EMC Documentum Foundation Services (DFS) version 7.1 before P01

Description The issue is related to the improper implementation of content uploading in the web service, allowing remote authenticated users to bypass intended content access restrictions.

Recommendations For versions 6.5 through 6.7 before 6.7 SP1 P22, update to 6.7 SP1 P22 or later. For version 6.7 SP2 before P08, update to 6.7 SP2 P08 or later. For version 7.0 before P12, update to 7.0 P12 or later. For version 7.1 before P01, update to 7.1 P01 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0622

Produtos afetados

Emc Documentum Foundation Services

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-0622 · Nota de Segurança
• http://secunia.com/advisories/56845 · Nota
• http://osvdb.org/102949 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2014-02/0007.html · Nota
• http://securityfocus.com/bid/65398 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90982 · Nota