Vulnerability in Emc Documentum Wdk

CVE-2014-4639

EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value.

EPSS: 0.022 (80.9th percentile) — read the EPSS interpretation.

Affected products

Emc Documentum_wdk
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

security_alert@emc.com (x_refsource_MISC)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Broken Link)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
security_alert@emc.com (vdb-entry, x_refsource_XF)