Lucene search

[email protected]CVE-2015-4530

HistoryAug 20, 2015 - 10:59 a.m.

CVE-2015-4530

2015-08-2010:59:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2015-4530

cross-site request forgery

csrf

emc documentum

webtop

documentum administrator

documentum digital assets manager

documentum web publishers

documentum task space

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.2%

JSON

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the authentication of arbitrary users. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2518.

CPENameOperatorVersion
emc:documentum_webtopemc documentum webtople6.8
emc:documentum_administratoremc documentum administratorle7.2
emc:documentum_web_publisheremc documentum web publisherle6.5
emc:documentum_taskspaceemc documentum taskspacele6.7
emc:documentum_digital_asset_manageremc documentum digital asset managerle6.5

CPE	Name	Operator	Version
emc:documentum_webtop	emc documentum webtop	le	6.8
emc:documentum_administrator	emc documentum administrator	le	7.2
emc:documentum_web_publisher	emc documentum web publisher	le	6.5
emc:documentum_taskspace	emc documentum taskspace	le	6.7
emc:documentum_digital_asset_manager	emc documentum digital asset manager	le	6.5

References

seclists.org/bugtraq/2015/Aug/87

www.securityfocus.com/bid/76405

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.2%

JSON

Related for CVE-2015-4530

securityvulns3 prion2 cve1 cert1