PT-2016-4445 · Emc · Emc Documentum D2

Publicado 2016-04-07 · Atualizado 2017-01-11 · CVE-2016-0888

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions prior to 4.6

Description The issue allows remote authenticated users to modify objects due to a lack of intended Access Control Lists (ACLs) for configuration objects. ACLs are used to define access rights for users, and their absence can lead to unauthorized modifications.

Recommendations For versions prior to 4.6, update to version 4.6 or later to include the intended ACLs for configuration objects and prevent unauthorized modifications.

Correção

Identificadores relacionados

CVE-2016-0888

Produtos afetados

Emc Documentum D2

Referências · 4

• http://seclists.org/bugtraq/2016/Apr/20 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0888 · Nota de Segurança
• http://securitytracker.com/id/1035459 · Nota
• https://osv.dev/vulnerability/CVE-2016-0888 · Aviso do Fabricante