CVE-2014-0630 EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL.

MediumCVSS 4.0 EPSS 0.95%

Published: 2014-03-06 13:00
Updated: 2026-06-17 03:03
Exploit status: No public exploit known

Description

EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL.

Affected products

Product	Affected versions	Fixed in
emc documentum taskspace	= 6.7-sp1	No fix listed
emc documentum taskspace	= 6.7-sp2	No fix listed

References

20140305 ESA-2014-012: EMC Documentum TaskSpace Multiple Vulnerabilities mailing-list

CVSS v2.0

4.0 Medium

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.95% (percentile 61.6)
CWE: CWE-264

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.