CVE-2014-0642

EUVD-2014-0673
EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
emcdocumentum_content_server
𝑥
≤ 6.7
emcdocumentum_content_server
6.0
emcdocumentum_content_server
6.5
emcdocumentum_content_server
6.5:sp1
emcdocumentum_content_server
6.5:sp2
emcdocumentum_content_server
6.5:sp3
emcdocumentum_content_server
6.6
emcdocumentum_content_server
6.7
emcdocumentum_content_server
6.7:sp2
emcdocumentum_content_server
7.0
emcdocumentum_content_server
7.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html
http://twitter.com/artika4biz/statuses/455358950116823040
http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html
http://twitter.com/artika4biz/statuses/455358950116823040