PT-2017-9532 · Emc · Emc Documentum Webtop+3

Publicado 2017-01-23 · Atualizado 2017-02-11 · CVE-2016-8213

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EMC Documentum WebTop versions 6.8 through 6.8 P17 and version 6.8.1 through 6.8.1 P05 EMC Documentum TaskSpace version 6.7SP3 through 6.7SP3 P01 EMC Documentum Capital Projects versions 1.9 through 1.9 P29 and version 1.10 through 1.10 P16 EMC Documentum Administrator versions 7.0 through 7.2 P17

Description The issue is a Stored Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Recommendations For EMC Documentum WebTop versions 6.8 through 6.8 P17, update to version 6.8 P18 or later. For EMC Documentum WebTop version 6.8.1 through 6.8.1 P05, update to version 6.8.1 P06 or later. For EMC Documentum TaskSpace version 6.7SP3 through 6.7SP3 P01, update to version 6.7SP3 P02 or later. For EMC Documentum Capital Projects versions 1.9 through 1.9 P29, update to version 1.9 P30 or later. For EMC Documentum Capital Projects version 1.10 through 1.10 P16, update to version 1.10 P17 or later. For EMC Documentum Administrator versions 7.0 through 7.2 P17, update to version 7.2 P18 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-8213

Produtos afetados

Emc Documentum Administrator

Documentum Capital Projects

Emc Documentum Taskspace

Emc Documentum Webtop

Referências · 5

• http://securitytracker.com/id/1037626 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8213 · Nota de Segurança
• http://securityfocus.com/archive/1/540019/30/0/threaded · Nota
• http://securityfocus.com/bid/95625 · Nota
• https://osv.dev/vulnerability/CVE-2016-8213 · Aviso do Fabricante