CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
- Score
- CVSS 2.0 6.8 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2014-08-20
- Last modified
- 2024-08-06
- Weaknesses
- CWE-352
Affected products
- Digital Assets Manager (Emc)
- Documentum Administrator (Emc)
- Documentum Capital Projects (Emc)
- Documentum Records Manager (Emc)
- Documentum Wdk (Emc)
- Documentum Webtop (Emc)
- Engineering Plant Facilities Management Solution For Documentum (Emc)
- Task Space (Emc)
- Web Publishers (Emc)
References
- http://secunia.com/advisories/60563
- http://www.securityfocus.com/archive/1/533159/30/0/threaded
- http://www.securityfocus.com/bid/69277
- http://www.securitytracker.com/id/1030742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95365
