medium6.4
CVE-2014-4637
Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct…
Impact
Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Documentum Wdk | through 6.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html
- http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html
- http://www.securitytracker.com/id/1031497
- http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html
- http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html
- http://www.securitytracker.com/id/1031497