CVE-2015-4524
Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum…
Does this matter?
Lower severity and a low EPSS score (2.40%). Track it; it rarely justifies an emergency change on its own.
Description
Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 2.40% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-434
- Affected
- emc/documentum administrator · emc/documentum digital asset manager · emc/documentum taskspace · emc/documentum web publisher · emc/documentum webtop
- Source
- security_alert@emc.com
References
- http://seclists.org/bugtraq/2015/Jul/9Mailing List, Third Party Advisory
- http://www.securitytracker.com/id/1032770Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Jul/9Mailing List, Third Party Advisory
- http://www.securitytracker.com/id/1032770Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.