CVE-2016-0888: Critical severity opentext documentum d2 vulnerability
Published Apr 7, 2016
·Updated
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
Affected Software
1 affected component
EMC Documentum D2<=4.5
Event History
Apr 7, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0888?
CVE-2016-0888 is considered a medium-severity vulnerability due to improper access controls.
2
How do I fix CVE-2016-0888?
To fix CVE-2016-0888, upgrade EMC Documentum D2 to version 4.6 or later.
3
What types of users are affected by CVE-2016-0888?
Remote authenticated users are affected by CVE-2016-0888 as they can modify objects due to the lack of proper ACLs.
4
What components of EMC Documentum D2 does CVE-2016-0888 impact?
CVE-2016-0888 affects configuration objects within EMC Documentum D2 prior to version 4.6.
5
Is there a workaround for CVE-2016-0888?
There is no specific workaround for CVE-2016-0888; the recommended action is to update to the latest version.