CVE-2014-4629
First published: Sat Dec 06 2014(Updated: )
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC Documentum Content Server | =6.7 | |
| EMC Documentum Content Server | =6.7-sp1 | |
| EMC Documentum Content Server | =6.7-sp2 | |
| EMC Documentum Content Server | =7.0 | |
| EMC Documentum Content Server | =7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html
- http://www.securityfocus.com/archive/1/534135/100/0/threaded
- http://www.securityfocus.com/bid/71422
- http://www.securitytracker.com/id/1031298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/emc
- canonical/emc documentum content server
- version/emc documentum content server/6.7
- version/emc documentum content server/6.7-sp1
- version/emc documentum content server/6.7-sp2
- version/emc documentum content server/7.0
- version/emc documentum content server/7.1