PT-2017-15528 · Emc · Emc Documentum Eroom

Publicado 2017-02-03 · Atualizado 2017-03-09 · CVE-2017-2766

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions prior to 7.4.5 P04 EMC Documentum eRoom versions prior to 7.5.0 P01

Description The issue concerns an unverified password change that could potentially be exploited by malicious users to compromise the affected system.

Recommendations For versions prior to 7.4.5 P04, update to version 7.4.5 P04 or later. For versions prior to 7.5.0 P01, update to version 7.5.0 P01 or later.

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2017-2766

Produtos afetados

Emc Documentum Eroom

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2766 · Nota de Segurança
• http://securityfocus.com/bid/95893 · Nota
• http://securityfocus.com/archive/1/540077/30/0/threaded · Correção
• https://osv.dev/vulnerability/CVE-2017-2766 · Aviso do Fabricante