CVE-2016-0914: Medium severity opentext documentum administrator vulnerability
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0914?
CVE-2016-0914 has a medium severity rating, indicating potential risk due to bypass of access restrictions.
How do I fix CVE-2016-0914?
To mitigate CVE-2016-0914, apply the appropriate security patches for your affected EMC Documentum software versions.
Which versions of EMC Documentum are affected by CVE-2016-0914?
CVE-2016-0914 affects EMC Documentum WebTop 6.8 before Patch 13, WebTop 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Capital Projects 1.9 before Patch 23, 1.10 before Patch 10, and TaskSpace 6.7 SP3.
What type of vulnerability is CVE-2016-0914?
CVE-2016-0914 is an access control vulnerability that allows remote authenticated users to bypass intended restrictions.
Can CVE-2016-0914 lead to data exposure?
Yes, CVE-2016-0914 can lead to unauthorized data exposure due to access control bypass.