EMC Documentum Content Server CVE-2014-0642 Information Disclosure Vulnerability

Bugtraq ID:	66796
Class:	Access Validation Error
CVE:	CVE-2014-0642
Remote:	Yes
Local:	No
Published:	Apr 11 2014 12:00AM
Updated:	Apr 11 2014 12:00AM
Credit:	Yuri Simione
Vulnerable:	EMC Documentum Content Server 7.1 EMC Documentum Content Server 7.0 EMC Documentum Content Server 6.7 SP2 EMC Documentum Content Server 6.7 SP1 EMC Documentum Content Server 6.7 EMC Documentum Content Server 6.6 P02 EMC Documentum Content Server 6.6 EMC Documentum Content Server 6.5 SP3 P02 EMC Documentum Content Server 6.5 Sp3 EMC Documentum Content Server 6.5 SP2 P02 EMC Documentum Content Server 6.5 Sp2 EMC Documentum Content Server 6.5 Sp1 EMC Documentum Content Server 6.5 EMC Documentum Content Server 6.0
Not Vulnerable:	EMC Documentum Content Server 7.1 P02 EMC Documentum Content Server 7.0 P13 EMC Documentum Content Server 6.7 SP2 P13 EMC Documentum Content Server 6.7 SP1 P26

EMC Documentum Content Server CVE-2014-0642 Information Disclosure Vulnerability

EMC Documentum Content Server is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

The following products are vulnerable:

EMC Documentum Content Server versions of 7.1
EMC Documentum Content Server versions of 7.0
EMC Documentum Content Server versions of 6.7 SP2
EMC Documentum Content Server versions of 6.7 SP1
EMC Documentum Content Server versions prior to 6.7 SP1

EMC Documentum Content Server CVE-2014-0642 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC Documentum Content Server CVE-2014-0642 Information Disclosure Vulnerability

References:

• EMC Homepage (EMC)
  
• ESA-2014-026: EMC Documentum Content Server Information Disclosure Vulnerability (EMC)