NetSight
medium6.3

CVE-2016-0914

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before P…

Impact

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.

Affected products

VendorProductAffected versions
EmcDocumentum Administrator
Versions 7.0, 7.1, 7.2
EmcDocumentum Capital Projects
Versions 1.9, 1.10
EmcDocumentum Taskspace
Version 6.7
EmcDocumentum Webtop
Versions 6.8, 6.8.1

Weakness classification

References