PT-2015-4711 · Emc · Emc Documentum Thumbnail Server

Publicado 2015-06-28 · Atualizado 2017-09-23 · CVE-2015-0550

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions EMC Documentum Thumbnail Server versions 6.7SP1 before P32 EMC Documentum Thumbnail Server versions 6.7SP2 before P25 EMC Documentum Thumbnail Server versions 7.0 before P19 EMC Documentum Thumbnail Server versions 7.1 before P16 EMC Documentum Thumbnail Server versions 7.2 before P01

Description A directory traversal issue allows remote attackers to bypass intended Content Server access restrictions.

Recommendations For EMC Documentum Thumbnail Server version 6.7SP1, update to P32 or later. For EMC Documentum Thumbnail Server version 6.7SP2, update to P25 or later. For EMC Documentum Thumbnail Server version 7.0, update to P19 or later. For EMC Documentum Thumbnail Server version 7.1, update to P16 or later. For EMC Documentum Thumbnail Server version 7.2, update to P01 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2015-0550

Produtos afetados

Emc Documentum Thumbnail Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0550 · Nota de Segurança
• http://securitytracker.com/id/1032694 · Nota
• http://seclists.org/bugtraq/2015/Jun/114 · Nota