CVE-2017-2766 EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified pass...
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum eroom | = 7.4.4 | No fix listed |
| emc documentum eroom | = 7.4.4-sp1 | No fix listed |
| emc documentum eroom | = 7.4.5 | No fix listed |
| emc documentum eroom | = 7.4.5-p01 | No fix listed |
| emc documentum eroom | = 7.4.5-p02 | No fix listed |
| emc documentum eroom | = 7.4.5-p03 | No fix listed |
| emc documentum eroom | = 7.5.0 | No fix listed |
References
- www.securityfocus.com patch third-party-advisory vdb-entry
- 95893 third-party-advisory vdb-entry