Lucene search

[email protected]CVE-2014-0622

HistoryFeb 06, 2014 - 10:55 p.m.

CVE-2014-0622

2014-02-0622:55:00

CWE-264

[email protected]

web.nvd.nist.gov

emc

dfs

web service

security vulnerability

content uploading

bypass

nvd

cve-2014-0622

6.4 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.8%

JSON

The web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6.7 SP2 before P08, 7.0 before P12, and 7.1 before P01 does not properly implement content uploading, which allows remote authenticated users to bypass intended content access restrictions via unspecified vectors.

CPENameOperatorVersion
emc:documentum_foundation_servicesemc documentum foundation serviceseq7.0
emc:documentum_foundation_servicesemc documentum foundation serviceseq7.1
emc:documentum_foundation_servicesemc documentum foundation serviceseq6.6
emc:documentum_foundation_servicesemc documentum foundation serviceseq6.5
emc:documentum_foundation_servicesemc documentum foundation serviceseq6.7

CPE	Name	Operator	Version
emc:documentum_foundation_services	emc documentum foundation services	eq	7.0
emc:documentum_foundation_services	emc documentum foundation services	eq	7.1
emc:documentum_foundation_services	emc documentum foundation services	eq	6.6
emc:documentum_foundation_services	emc documentum foundation services	eq	6.5
emc:documentum_foundation_services	emc documentum foundation services	eq	6.7

References

archives.neohapsis.com/archives/bugtraq/2014-02/0007.html

osvdb.org/102949

secunia.com/advisories/56845

www.securityfocus.com/bid/65398

exchange.xforce.ibmcloud.com/vulnerabilities/90982

6.4 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.8%

JSON

Related for CVE-2014-0622

prion1 securityvulns4