critical9.0
CVE-2014-4629
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecifi…
Impact
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Documentum Content Server | Versions 6.7, 7.0, 7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html
- http://www.securityfocus.com/archive/1/534135/100/0/threaded
- http://www.securityfocus.com/bid/71422
- http://www.securitytracker.com/id/1031298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html
- http://www.securityfocus.com/archive/1/534135/100/0/threaded
- http://www.securityfocus.com/bid/71422
- http://www.securitytracker.com/id/1031298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085