PT-2015-4711 · Emc · Emc Documentum Thumbnail Server

Published 2015-06-28 · Updated 2017-09-23 · CVE-2015-0550

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions EMC Documentum Thumbnail Server versions 6.7SP1 before P32 EMC Documentum Thumbnail Server versions 6.7SP2 before P25 EMC Documentum Thumbnail Server versions 7.0 before P19 EMC Documentum Thumbnail Server versions 7.1 before P16 EMC Documentum Thumbnail Server versions 7.2 before P01

Description A directory traversal issue allows remote attackers to bypass intended Content Server access restrictions.

Recommendations For EMC Documentum Thumbnail Server version 6.7SP1, update to P32 or later. For EMC Documentum Thumbnail Server version 6.7SP2, update to P25 or later. For EMC Documentum Thumbnail Server version 7.0, update to P19 or later. For EMC Documentum Thumbnail Server version 7.1, update to P16 or later. For EMC Documentum Thumbnail Server version 7.2, update to P01 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-0550

Affected Products

Emc Documentum Thumbnail Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0550 · Security Note
• http://securitytracker.com/id/1032694 · Note
• http://seclists.org/bugtraq/2015/Jun/114 · Note