CVE-2014-2518 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
MediumCVSS 6.8
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc digital assets manager | = 6.5 | No fix listed |
| emc digital assets manager | = 6.5-sp5 | No fix listed |
| emc digital assets manager | = 6.5-sp6 | No fix listed |
| emc documentum administrator | = 6.7 | No fix listed |
| emc documentum administrator | = 6.7-sp1 | No fix listed |
| emc documentum administrator | = 6.7-sp2 | No fix listed |
| emc documentum administrator | = 7.0 | No fix listed |
| emc documentum administrator | = 7.1 | No fix listed |
| emc documentum capital projects | = 1.8 | No fix listed |
| emc documentum capital projects | = 1.9 | No fix listed |
| emc documentum records manager | = 6.7 | No fix listed |
| emc documentum records manager | = 6.7-sp1 | No fix listed |
| emc documentum records manager | = 6.7-sp2 | No fix listed |
| emc documentum wdk | = 6.7-sp1 | No fix listed |
| emc documentum wdk | = 6.7-sp2 | No fix listed |
| emc documentum webtop | = 6.7 | No fix listed |
| emc documentum webtop | = 6.7-sp1 | No fix listed |
| emc documentum webtop | = 6.7-sp2 | No fix listed |
| emc engineering plant facilities management solution for documentum | = 1.7-sp1 | No fix listed |
| emc task space | = 6.7-sp1 | No fix listed |
| emc task space | = 6.7-sp2 | No fix listed |
| emc web publishers | = 6.5-sp6 | No fix listed |
| emc web publishers | = 6.5-sp7 | No fix listed |
References
- 60563 third-party-advisory
- 20140818 ESA-2014-073: EMC Documentum Multiple Cross-Site Request Forgery Vulnerabilities mailing-list
- 69277 vdb-entry
- 1030742 vdb-entry
- emc-cve20142518-csrf(95365) vdb-entry