Lucene search

PRIOn knowledge basePRION:CVE-2015-4530

HistoryAug 20, 2015 - 10:59 a.m.

Cross site request forgery (csrf)

2015-08-2010:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

39.3%

JSON

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the authentication of arbitrary users. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2518.

CPENameOperatorVersion
documentum_administratorle7.2
documentum_digital_asset_managerle6.5
documentum_taskspacele6.7
documentum_web_publisherle6.5
documentum_webtople6.8

Name	Operator	Version
documentum_administrator	le	7.2
documentum_digital_asset_manager	le	6.5
documentum_taskspace	le	6.7
documentum_web_publisher	le	6.5
documentum_webtop	le	6.8

References

seclists.org/bugtraq/2015/Aug/87

www.securityfocus.com/bid/76405

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for PRION:CVE-2015-4530