CVE-2016-0914
Last modified
CVE-2016-0914 is a vulnerability of currently unknown severity. EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.. EPSS estimates a 1.30% chance of exploitation in the next 30 days.
Description
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Emc | Documentum Administrator | 7.0 | — |
| Emc | Documentum Administrator | 7.1 | — |
| Emc | Documentum Administrator | 7.2 | — |
| Emc | Documentum Capital Projects | 1.9 | — |
| Emc | Documentum Capital Projects | 1.10 | — |
| Emc | Documentum Taskspace | 6.7 | Sp3 |
| Emc | Documentum Webtop | 6.8 | — |
| Emc | Documentum Webtop | 6.8.1 | — |
References
- http://seclists.org/bugtraq/2016/Jun/92Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036153Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2016/Jun/92Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036153Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-0914?
How severe is CVE-2016-0914?
How do I fix CVE-2016-0914?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-0908EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1…
- CVE-2016-0909EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE)…
- CVE-2016-0910EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004,…
- CVE-2016-0911EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a defa…
- CVE-2016-0912EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows rem…
- CVE-2016-0913The client in EMC Replication Manager (RM) before 5.5.3.0_01…
- CVE-2016-0915The Self-Service Portal in EMC RSA Authentication Manager (A…8.1
- CVE-2016-0916EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x bef…
- CVE-2016-0917The SMB service in EMC VNXe (VNXe3200 Operating Environment …
- CVE-2016-0918EMC RSA Identity Management and Governance before 6.8.1 P25 …
- CVE-2016-0919EMC RSA Web Threat Detection version 5.0, RSA Web Threat Det…6.1
- CVE-2016-0920Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in …
Are you affected by CVE-2016-0914?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST