medium6.8
CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the a…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Digital Assets Manager | Version 6.5 |
| Emc | Documentum Administrator | Versions 6.7, 7.0, 7.1 |
| Emc | Documentum Capital Projects | Versions 1.8, 1.9 |
| Emc | Documentum Records Manager | Version 6.7 |
| Emc | Documentum Wdk | Version 6.7 |
| Emc | Documentum Webtop | Version 6.7 |
| Emc | Engineering Plant Facilities Management Solution For Documentum | Version 1.7 |
| Emc | Task Space | Version 6.7 |
| Emc | Web Publishers | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60563
- http://www.securityfocus.com/archive/1/533159/30/0/threaded
- http://www.securityfocus.com/bid/69277
- http://www.securitytracker.com/id/1030742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95365
- http://secunia.com/advisories/60563
- http://www.securityfocus.com/archive/1/533159/30/0/threaded
- http://www.securityfocus.com/bid/69277
- http://www.securitytracker.com/id/1030742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95365