Multiple EMC Documentum Products CVE-2014-4637 URL Redirection Vulnerability
BID:71875
Info
Multiple EMC Documentum Products CVE-2014-4637 URL Redirection Vulnerability
| Bugtraq ID: | 71875 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-4637 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2015 12:00AM |
| Updated: | Jan 05 2015 12:00AM |
| Credit: | The vendor reported the issue. |
| Vulnerable: |
EMC Web Publishers 6.5 SP7 EMC Web Publishers 6.5 SP6 EMC Web Publishers 6.5 EMC Records Client 6.7 SP1 EMC Records Client 6.7 SP2 EMC Records Client 6.7 EMC Engineering Plant Facilities Management Solution for Documentum 1.7SP1 EMC Documentum Webtop 6.7 SP2 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 EMC Documentum Web Publisher 6.5SP7 EMC Documentum Web Publisher 6.5 SP5 EMC Documentum Web Publisher 6.5 SP4 EMC Documentum Web Publisher 6.5 Sp3 EMC Documentum Web Publisher 6.5 Sp2 EMC Documentum Web Publisher 6.5 Sp1 EMC Documentum WDK 6.7SP2 EMC Documentum WDK 6.7SP1 P28 EMC Documentum WDK 6.7SP1 EMC Documentum WDK 6.7 SP2 EMC Documentum WDK 6.7 SP1 EMC Documentum WDK 6.7 EMC Documentum Taskspace 6.7 SP2 EMC Documentum Taskspace 6.7 SP1 P25 EMC Documentum Taskspace 6.7 SP1 EMC Documentum Taskspace 6.7 SP1 EMC Documentum Taskspace 6.7 EMC Documentum Capital Projects 1.9 EMC Documentum Capital Projects 1.8 P11 EMC Documentum Capital Projects 1.8 EMC Documentum Capital Projects 1.7 EMC Documentum Administrator 7.1 EMC Documentum Administrator 7.0 P15 EMC Documentum Administrator 7.0 EMC Documentum Administrator 6.7SP2 P15 EMC Documentum Administrator 6.7SP2 EMC Documentum Administrator 6.7SP1 P28 EMC Documentum Administrator 6.7 SP1 EMC Documentum Administrator 6.7 SP1 EMC Digital Assets Manager 6.5 SP6 EMC Digital Assets Manager 6.5 SP5 EMC Digital Assets Manager 6.5 |
| Not Vulnerable: |
EMC Documentum Webtop 6.8 |
Discussion
Multiple EMC Documentum Products CVE-2014-4637 URL Redirection Vulnerability
Multiple EMC Documentum products are prone to a remote URL-redirection vulnerability.
An attacker can leverage this issue by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.
Multiple EMC Documentum products are prone to a remote URL-redirection vulnerability.
An attacker can leverage this issue by constructing a URI that includes a malicious site redirection. When an unsuspecting victim follows the URI, they may be redirected to an attacker-controlled site; this may aid in phishing attacks.
Solution / Fix
Multiple EMC Documentum Products CVE-2014-4637 URL Redirection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.