Description (CNA)
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/534135/100/0/threaded
- http://www.securitytracker.com/id/1031298
- http://www.securityfocus.com/bid/71422
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html
ADP enrichment
No English description supplied.
- http://www.securityfocus.com/archive/1/534135/100/0/threaded
- http://www.securitytracker.com/id/1031298
- http://www.securityfocus.com/bid/71422
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html