CVE-2014-2276

The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition CMCNE before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows remote attackers to obtain sensitive information by importing a crafted firmware file...

CVE-2014-2276

EMC Connectrix Manager Converged Network Edition (CMCNE) affected before 12.1.5. The FileUploadController servlet fails input validation, enabling an unauthenticated remote attacker to disclose arbitrary files by importing a crafted firmware file (information disclosure). Some sources describe un...

EMC Connectrix Manager Converged Network Edition 远程信息泄露漏洞

BUGTRAQ ID: 66308 CVE ID: CVE-2014-2276 EMC Connectrix Manager是Connectrix服务器的管理接口，可以集中管理多个交换机等产品。 EMC Connectrix Manager Converged Network Edition 12.1.2及其他版本的FileUploadController在实现上存在任意文件信息泄露漏洞，FileUploadController服务程序用于导入固件文件到Connectrix Manager库，成功利用后可使攻击者获取敏感信息。 0 EMC Connectrix Manager...

EMC Documentum TaskSpace信息泄漏漏洞

Bugtraq ID:65991 CVE ID:CVE-2014-0630 EMC Documentum是一款企业文档和图像管理工具，使文档的创建、修改、跟踪和在业务过程中的利用变得高效、规范和严谨。 EMC Documentum TaskSpace服务器不正确过滤用户提交的输入，允许远程攻击者利用漏洞修改图像服务URL，获取敏感内容。 0 EMC Documentum TaskSpace TSP 6.7SP1 EMC Documentum TaskSpace TSP 6.7SP2 厂商补丁： HostBill ----- HostBill...

EMC Documentum TaskSpace远程权限提升漏洞

Bugtraq ID:65990 CVE ID:CVE-2014-0629 EMC Documentum是一款企业文档和图像管理工具，使文档的创建、修改、跟踪和在业务过程中的利用变得高效、规范和严谨。 把dmworld group用户提交到dmsuperusersdynamic组时存在安全漏洞，允许非特权TSP用户获取敏感特权信息。 0 EMC Documentum TaskSpace TSP 6.7SP1 EMC Documentum TaskSpace TSP 6.7SP2 厂商补丁： EMC ----- EMC Documentum TaskSpace 6.7 SP1 P25和6....

CVE-2014-0624

EMC RSA Data Loss Prevention DLP 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors...

CVE-2014-0629

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dmworld group and the dmsuperusersdynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by...

CVE-2014-0630

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL...

Information disclosure

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dmworld group and the dmsuperusersdynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by...

Design/Logic Flaw

EMC RSA Data Loss Prevention DLP 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors...

Code injection

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL...

CVE-2014-0630

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL...

CVE-2014-0624

CVE-2014-0624 corresponds to an improper session management vulnerability in RSA Data Loss Prevention (DLP). The issue affects RSA DLP versions 9.0, 9.5, and 9.6 (Enterprise Manager) prior to 9.6-SP2, where session handling could allow a lower-privileged, authenticated user to access content and ...

CVE-2014-0629

EMC Documentum TaskSpace TSP 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dmworld group and the dmsuperusersdynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by...

CVE-2014-0624

EMC RSA Data Loss Prevention DLP 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors...

CVE-2014-0630

CVE-2014-0630 affects EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11. The issue allows remote authenticated users to retrieve arbitrary files by modifying the imaging-service URL used to stream content, indicating a failure in input/url validation within the imaging servic...

CVE-2014-0629

EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 are affected by CVE-2014-0629 due to an incorrect group-addition implementation between the dm_world group and the dm_superusers_dynamic group. This can allow remote authenticated users to obtain sensitive information and gain...

EMC RSA Data Loss Prevention不安全会话管理权限提升漏洞

BUGTRAQ ID: 65914 CVECAN ID: CVE-2014-0624 RSA Data Loss Prevention可以发现和监控敏感数据（如客户信用卡数据、员工 PII 或公司知识产权）的位置和流。 通过电子邮件、Web、PC、智能手机等培训终端用户并实施控制措施，防止敏感数据丢失。 RSA Data Loss Prevention 9.0, 9.5, 9.6, 9.6 SP1版本在实现上存在不安全的会话管理机制，这可使较低权限的用户访问高级别用户可以访问的内容。 0 EMC Data Loss Prevention 9.6 EMC Data Loss...

CVE-2014-0625

The SSLSocket implementation in the 1 JSAFE and 2 JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service memory consumption by triggering application-data processing during the TLS handshake, a time at which the data is internal...

CVE-2014-0626

The 1 JSAFE and 2 JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended cryptographic protection mechanisms by triggering application-data processing during the TLS handshake, a time at which the data is both unencrypted and...