CVE-2016-0888 EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
HighCVSS 8.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum d2 | <= 4.5 | No fix listed |
References
- 20160404 ESA-2016-034: EMC Documentum D2 Configuration Object Vulnerability mailing-list third-party-advisory
- 1035459 third-party-advisory vdb-entry