CVE-2016-6644 EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value.
MediumCVSS 5.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum d2 | <= 4.5 | No fix listed |
| emc documentum d2 | <= 4.6 | No fix listed |
References
- 20160913 ESA-2016-108: EMC Documentum D2 Authentication Bypass Vulnerability mailing-list third-party-advisory
- 92906 vdb-entry
- 1036796 vdb-entry