CVE-2012-0398: High severity emc eroom vulnerability
Published Mar 15, 2012
·Updated
EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
Affected Software
4 affected components
EMC Documentum eRoom<=7.4.3
EMC Documentum eRoom=7.3.0
EMC Documentum eRoom=7.4.1
EMC Documentum eRoom=7.4.2
Event History
Mar 15, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0398?
CVE-2012-0398 has a medium severity rating as it enables session hijacking vulnerabilities in EMC Documentum eRoom.
2
How do I fix CVE-2012-0398?
To fix CVE-2012-0398, upgrade EMC Documentum eRoom to version 7.4.4 or later.
3
What versions are affected by CVE-2012-0398?
CVE-2012-0398 affects EMC Documentum eRoom versions 7.3.0 through 7.4.3.
4
What risks are associated with CVE-2012-0398?
The risks associated with CVE-2012-0398 include unauthorized access to user sessions and potential data breaches.
5
Can CVE-2012-0398 be exploited remotely?
Yes, CVE-2012-0398 can be exploited remotely due to improper validation of session cookies.