CVE-2014-2518
20.08.2014, 11:17
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
| Vendor | Product | Version |
|---|---|---|
| emc | digital_assets_manager | 6.5 |
| emc | digital_assets_manager | 6.5:sp5 |
| emc | digital_assets_manager | 6.5:sp6 |
| emc | documentum_administrator | 6.7 |
| emc | documentum_administrator | 6.7:sp1 |
| emc | documentum_administrator | 6.7:sp2 |
| emc | documentum_administrator | 7.0 |
| emc | documentum_administrator | 7.1 |
| emc | documentum_capital_projects | 1.8 |
| emc | documentum_capital_projects | 1.9 |
| emc | documentum_records_manager | 6.7 |
| emc | documentum_records_manager | 6.7:sp1 |
| emc | documentum_records_manager | 6.7:sp2 |
| emc | documentum_wdk | 6.7:sp1 |
| emc | documentum_wdk | 6.7:sp2 |
| emc | documentum_webtop | 6.7 |
| emc | documentum_webtop | 6.7:sp1 |
| emc | documentum_webtop | 6.7:sp2 |
| emc | engineering_plant_facilities_management_solution_for_documentum | 1.7:sp1 |
| emc | task_space | 6.7:sp1 |
| emc | task_space | 6.7:sp2 |
| emc | web_publishers | 6.5:sp6 |
| emc | web_publishers | 6.5:sp7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References