PT-2014-6035 · Emc · Emc Documentum Content Server

Publicado 2014-12-06 · Atualizado 2018-10-09 · CVE-2014-4629

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions 6.7 before SP2 P19 EMC Documentum Content Server versions 7.0 through 7.1 before 7.1 P10

Description The issue allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.

Recommendations For versions 6.7 before SP2 P19, update to SP2 P19 or later to resolve the issue. For versions 7.0 through 7.1 before 7.1 P10, update to 7.1 P10 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4629

Produtos afetados

Emc Documentum Content Server

Referências · 6

• http://securityfocus.com/bid/71422 · Nota
• http://securityfocus.com/archive/1/534135/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4629 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99085 · Nota
• http://securitytracker.com/id/1031298 · Nota
• http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html · Nota