CVE-2017-2766

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2017-02-03

Last modified

2024-08-05

Weaknesses

CWE-640

Affected products

• Documentum Eroom (Emc)

References

• http://www.securityfocus.com/archive/1/540077/30/0/threaded
• http://www.securityfocus.com/bid/95893