Multiple EMC Documentum Products CVE-2014-4639 Security Vulnerability

Bugtraq ID:	71878
Class:	Design Error
CVE:	CVE-2014-4639
Remote:	Yes
Local:	No
Published:	Jan 05 2015 12:00AM
Updated:	Jan 05 2015 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	EMC Records Client 6.7 SP1 EMC Records Client 6.7 SP2 EMC Records Client 6.7 EMC Engineering Plant Facilities Management Solution for Documentum 1.7SP1 EMC Documentum Webtop 6.7 SP2 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 SP1 EMC Documentum Webtop 6.7 EMC Documentum Web Publisher 6.5SP7 EMC Documentum Web Publisher 6.5 SP5 EMC Documentum Web Publisher 6.5 SP4 EMC Documentum Web Publisher 6.5 Sp3 EMC Documentum Web Publisher 6.5 Sp2 EMC Documentum Web Publisher 6.5 Sp1 EMC Documentum WDK 6.7SP2 EMC Documentum WDK 6.7SP1 P28 EMC Documentum WDK 6.7SP1 EMC Documentum WDK 6.7 SP2 EMC Documentum WDK 6.7 SP1 EMC Documentum WDK 6.7 SP1 EMC Documentum WDK 6.7 EMC Documentum Taskspace 6.7 SP2 EMC Documentum Taskspace 6.7 SP1 P25 EMC Documentum Taskspace 6.7 SP1 EMC Documentum Taskspace 6.7 SP1 EMC Documentum Taskspace 6.7 EMC Documentum Capital Projects 1.9 EMC Documentum Capital Projects 1.8 P11 EMC Documentum Capital Projects 1.8 EMC Documentum Capital Projects 1.7 EMC Documentum Administrator 7.1 EMC Documentum Administrator 7.0 P15 EMC Documentum Administrator 7.0 EMC Documentum Administrator 6.7SP2 P15 EMC Documentum Administrator 6.7SP2 EMC Documentum Administrator 6.7SP1 P28 EMC Documentum Administrator 6.7 SP1 EMC Documentum Administrator 6.7 SP1 EMC Digital Assets Manager 6.5 SP6 EMC Digital Assets Manager 6.5 SP5 EMC Digital Assets Manager 6.5
Not Vulnerable:	EMC Documentum Webtop 6.8

Multiple EMC Documentum Products CVE-2014-4639 Security Vulnerability

Multiple EMC Documentum products are prone to a security vulnerability.

A remote attacker may exploit this issue to perform unauthorized actions. This may aid in further attacks.

Multiple EMC Documentum Products CVE-2014-4639 Security Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple EMC Documentum Products CVE-2014-4639 Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple EMC Documentum Products CVE-2014-4639 Security Vulnerability

References:

• EMC Homepage (EMC)
  
• EMC Documentum Web Development Kit (WDK) and WDK-based clients contain multiple (SecLists.Org)