Multiple EMC Documentum Products CVE-2014-4636 Cross Site Request Forgery Vulnerability
BID:71874
Info
Multiple EMC Documentum Products CVE-2014-4636 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 71874 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-4636 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2015 12:00AM |
| Updated: | Jan 05 2015 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
EMC Web Publishers 6.5 SP7 EMC Web Publishers 6.5 SP6 EMC Web Publishers 6.5 EMC Task Space 6.7 SP1 EMC Task Space 6.7 EMC Records Client 6.7 SP1 EMC Records Client 6.7 SP2 EMC Records Client 6.7 EMC Engineering Plant Facilities Management Solution for Documentum 1.7SP1 EMC Documentum Webtop 6.7 SP2 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 EMC Documentum Capital Projects 1.9 EMC Documentum Capital Projects 1.8 P11 EMC Documentum Capital Projects 1.8 EMC Documentum Capital Projects 1.7 EMC Documentum Administrator 7.1 EMC Documentum Administrator 7.0 P15 EMC Documentum Administrator 7.0 EMC Documentum Administrator 6.7SP2 P15 EMC Documentum Administrator 6.7SP2 EMC Documentum Administrator 6.7SP1 P28 EMC Documentum Administrator 6.7 SP1 EMC Documentum Administrator 6.7 SP1 EMC Digital Assets Manager 6.5 SP6 EMC Digital Assets Manager 6.5 SP5 EMC Digital Assets Manager 6.5 |
| Not Vulnerable: |
EMC Documentum Webtop 6.8 |
Discussion
Multiple EMC Documentum Products CVE-2014-4636 Cross Site Request Forgery Vulnerability
Multiple EMC Documentum products are prone to a cross-site request-forgery vulnerability because it fails to properly validate session key check.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Multiple EMC Documentum products are prone to a cross-site request-forgery vulnerability because it fails to properly validate session key check.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Solution / Fix
Multiple EMC Documentum Products CVE-2014-4636 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple EMC Documentum Products CVE-2014-4636 Cross Site Request Forgery Vulnerability
References:
References: