Vulnerability in EMC Documentum Administrator
CVE-2016-0914
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.
EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Emc Documentum_administrator — versions 7.0, 7.1, 7.2
- Emc Documentum_capital_projects — versions 1.9, 1.10
- Emc Documentum_taskspace — versions 6.7
- Emc Documentum_webtop — versions 6.8, 6.8.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2016-0914?
- CVE-2016-0914 is a medium-severity vulnerability in EMC Documentum Administrator, classified under Improper Access Control. CVSS score: 6.3/10. Published 2016-06-23.
- How severe is CVE-2016-0914?
- Medium severity. CVSS v3 base score is 6.3 out of 10.