CVE-2016-0888

EUVD-2016-0899
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
emcdocumentum_d2
𝑥
≤ 4.5
𝑥
= Vulnerable software versions
References
http://seclists.org/bugtraq/2016/Apr/20
http://www.securitytracker.com/id/1035459
http://seclists.org/bugtraq/2016/Apr/20
http://www.securitytracker.com/id/1035459