PT-2014-3726 · Emc · Emc Documentum Taskspace

Published 2014-03-06 · Updated 2014-03-07 · CVE-2014-0630

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Documentum TaskSpace (TSP) versions 6.7SP1 before P25 EMC Documentum TaskSpace (TSP) versions 6.7SP2 before P11

Description The issue allows remote authenticated users to read arbitrary files by modifying the imaging-service URL.

Recommendations For versions 6.7SP1 before P25, update to P25 or later. For versions 6.7SP2 before P11, update to P11 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0630

Affected Products

Emc Documentum Taskspace

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0630 · Security Note
• http://seclists.org/bugtraq/2014/Mar/33 · Note