CVE-2013-0937: Medium severity hp records manager vulnerability

Published May 10, 2013
·
Updated

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.

Affected Software

8 affected components
EMC Documentum Records Manager=6.7
EMC Documentum Records Manager=6.7-sp1
EMC Documentum TaskSpace=6.7
EMC Documentum TaskSpace=6.7-sp1
EMC Documentum WDK=6.7
EMC Documentum WDK=6.7-sp1
EMC Documentum WebTop=6.7
EMC Documentum WebTop=6.7-sp1

Event History

May 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-0937?

CVE-2013-0937 is classified as a high-severity vulnerability due to its ability to allow session hijacking.

2

How do I fix CVE-2013-0937?

To remediate CVE-2013-0937, upgrade to EMC Documentum Webtop, WDK, Taskspace, or Records Manager version 6.7 SP2 or later.

3

Which versions of EMC Documentum are affected by CVE-2013-0937?

CVE-2013-0937 affects EMC Documentum Webtop, WDK, Taskspace, and Records Manager versions prior to 6.7 SP2.

4

What types of attacks does CVE-2013-0937 facilitate?

CVE-2013-0937 facilitates session fixation attacks that enable attackers to hijack legitimate user sessions.

5

Is CVE-2013-0937 specific to any particular platform?

CVE-2013-0937 is specific to EMC Documentum applications deployed in web environments.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203