CVE-2016-0914

Related Files

EMC Documentum WDK-Based Applications Code Execution / Traversal

Posted Jul 4, 2016

Authored by Andrey B. Panfilov

All EMC Documentum WDK-based applications (Taskspace, Webtop, Documentum Administrator, EPFM) contain an extremely dangerous web component – API Tester. It allows for path traversal, arbitrary code execution, and privilege escalation attacks.

tags | advisory, web, arbitrary, code execution, file inclusion

advisories | CVE-2014-0629, CVE-2016-0914

SHA-256 | 46663e14e60c2d3f94f374b2571e350b1e7744ac4f13a7cd8032e426b3ab94df

Download | Favorite | View

EMC Documentum WebTop Improper Authorization

Posted Jun 22, 2016

Site emc.com

Remote authenticated WebTop and WebTop Client users may gain access to the IAPI/IDQL interface in WebTop without proper authorization. Malicious users could exploit this vulnerability to run IAPI/IDQL commands on the affected systems using their own privilege. Affected products include EMC Documentum WebTop versions 6.8 and 6.8.1, Administrator versions 7.0, 7.1, 7.2, TaskSpace version 6.7 SP3, and Capital Projects versions 1.9 and 1.10.

tags | advisory, remote

advisories | CVE-2016-0914

SHA-256 | 922ee5b10d55ca104fdafbfbabd2f4263e941bd47bdcae7794773725a1ceb3d4

Download | Favorite | View