PT-2014-3725 · Emc · Emc Documentum Taskspace

Publicado 2014-03-06 · Atualizado 2014-03-07 · CVE-2014-0629

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum TaskSpace (TSP) versions 6.7SP1 before P25 EMC Documentum TaskSpace (TSP) versions 6.7SP2 before P11

Description The issue arises from the incorrect handling of the interaction between the dm world group and the dm superusers dynamic group. This allows remote authenticated users to obtain sensitive information and gain privileges in certain circumstances by leveraging an incorrect group-addition implementation.

Recommendations For versions 6.7SP1 before P25, update to a version that includes the fixes provided in P25 or later. For versions 6.7SP2 before P11, update to a version that includes the fixes provided in P11 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0629

Produtos afetados

Emc Documentum Taskspace

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0629 · Nota de Segurança
• http://seclists.org/bugtraq/2014/Mar/33 · Nota