CVE-2016-0888

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
emcdocumentum_d2
𝑥
≤ 4.5
𝑥
= Vulnerable software versions
References
http://seclists.org/bugtraq/2016/Apr/20
http://www.securitytracker.com/id/1035459
http://seclists.org/bugtraq/2016/Apr/20
http://www.securitytracker.com/id/1035459