Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Pablo Gaston Milano

Researcher fromCYBSEC S.A. Security Systems
#23284of 53,633
10Total CVSS
Vulnerabilities · 1
PT-2008-2279
10
2008-02-07
Emc · Emc Documentum Administrator · CVE-2008-0656
**Name of the Vulnerable Software and Affected Versions** EMC Documentum Administrator version 5.3.0.313 EMC Documentum Webtop version 5.3.0.317 **Description** The issue allows remote attackers to overwrite arbitrary files via the `filename` attribute in the dmclTrace.jsp file. This can be exploited by uploading files with malicious intent. **Recommendations** For EMC Documentum Administrator version 5.3.0.313, restrict access to the dmclTrace.jsp file to prevent unauthorized file uploads. For EMC Documentum Webtop version 5.3.0.317, restrict access to the dmclTrace.jsp file to prevent unauthorized file uploads. As a temporary workaround, consider disabling the file upload functionality in the dmclTrace.jsp file until a patch is available.