PT-2017-15528 · Emc · Emc Documentum Eroom

Published 2017-02-03 · Updated 2017-03-09 · CVE-2017-2766

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions prior to 7.4.5 P04 EMC Documentum eRoom versions prior to 7.5.0 P01

Description The issue concerns an unverified password change that could potentially be exploited by malicious users to compromise the affected system.

Recommendations For versions prior to 7.4.5 P04, update to version 7.4.5 P04 or later. For versions prior to 7.5.0 P01, update to version 7.5.0 P01 or later.

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2017-2766

Affected Products

Emc Documentum Eroom

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2766 · Security Note
• http://securityfocus.com/archive/1/540077/30/0/threaded · Patch
• https://osv.dev/vulnerability/CVE-2017-2766 · Vendor Advisory
• http://securityfocus.com/bid/95893 · Note