CVE Vulnerabilities

CVE-2013-0937

Improper Authentication

Published: May 10, 2013 | Modified: May 10, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Documentum_records_manager Emc 6.7 (including) 6.7 (including)
Documentum_records_manager Emc 6.7-sp1 (including) 6.7-sp1 (including)
Documentum_taskspace Emc 6.7 (including) 6.7 (including)
Documentum_taskspace Emc 6.7-sp1 (including) 6.7-sp1 (including)
Documentum_wdk Emc 6.7 (including) 6.7 (including)
Documentum_wdk Emc 6.7-sp1 (including) 6.7-sp1 (including)
Documentum_webtop Emc 6.7 (including) 6.7 (including)
Documentum_webtop Emc 6.7-sp1 (including) 6.7-sp1 (including)

Potential Mitigations

References