Lucene search

DellCVE-2015-4530

HistoryAug 20, 2015 - 10:59 a.m.

CVE-2015-4530

2015-08-2010:59:11

CWE-352

dell

web.nvd.nist.gov

cve-2015-4530

cross-site request forgery

csrf

emc documentum

webtop

documentum administrator

documentum digital assets manager

documentum web publishers

documentum task space

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

59.6%

JSON

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the authentication of arbitrary users. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2518.

Affected configurations

Nvd

Node

emcdocumentum_administratorRange≤7.2

emcdocumentum_digital_asset_managerRange≤6.5sp6

emcdocumentum_taskspaceRange≤6.7sp2

emcdocumentum_web_publisherRange≤6.5sp7

emcdocumentum_webtopRange≤6.8

VendorProductVersionCPE
emcdocumentum_administrator*cpe:2.3:a:emc:documentum_administrator:*:*:*:*:*:*:*:*
emcdocumentum_digital_asset_manager*cpe:2.3:a:emc:documentum_digital_asset_manager:*:sp6:*:*:*:*:*:*
emcdocumentum_taskspace*cpe:2.3:a:emc:documentum_taskspace:*:sp2:*:*:*:*:*:*
emcdocumentum_web_publisher*cpe:2.3:a:emc:documentum_web_publisher:*:sp7:*:*:*:*:*:*
emcdocumentum_webtop*cpe:2.3:a:emc:documentum_webtop:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	documentum_administrator	*	cpe:2.3:a:emc:documentum_administrator::::::::
emc	documentum_digital_asset_manager	*	cpe:2.3:a:emc:documentum_digital_asset_manager::sp6::::::*
emc	documentum_taskspace	*	cpe:2.3:a:emc:documentum_taskspace::sp2::::::*
emc	documentum_web_publisher	*	cpe:2.3:a:emc:documentum_web_publisher::sp7::::::*
emc	documentum_webtop	*	cpe:2.3:a:emc:documentum_webtop::::::::

References

seclists.org/bugtraq/2015/Aug/87

www.securityfocus.com/bid/76405

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

59.6%

JSON

Related for CVE-2015-4530