CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value.

Score

CVSS 3.0 5.3 Medium

Status

Modified - security_alert@emc.com

Published

2016-09-17

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-264

Affected products

• Documentum D2 (Emc)

References

• http://seclists.org/bugtraq/2016/Sep/18
• http://www.securityfocus.com/bid/92906
• http://www.securitytracker.com/id/1036796