PT-2014-3718 · Emc · Emc Documentum Foundation Services

Published 2014-02-06 · Updated 2018-01-03 · CVE-2014-0622

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum Foundation Services (DFS) versions 6.5 through 6.7 before 6.7 SP1 P22 EMC Documentum Foundation Services (DFS) version 6.7 SP2 before P08 EMC Documentum Foundation Services (DFS) version 7.0 before P12 EMC Documentum Foundation Services (DFS) version 7.1 before P01

Description The issue is related to the improper implementation of content uploading in the web service, allowing remote authenticated users to bypass intended content access restrictions.

Recommendations For versions 6.5 through 6.7 before 6.7 SP1 P22, update to 6.7 SP1 P22 or later. For version 6.7 SP2 before P08, update to 6.7 SP2 P08 or later. For version 7.0 before P12, update to 7.0 P12 or later. For version 7.1 before P01, update to 7.1 P01 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0622

Affected Products

Emc Documentum Foundation Services

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-0622 · Security Note
• http://secunia.com/advisories/56845 · Note
• http://osvdb.org/102949 · Note
• http://archives.neohapsis.com/archives/bugtraq/2014-02/0007.html · Note
• http://securityfocus.com/bid/65398 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90982 · Note