PT-2016-4443
CVE-2016-0886
·
تاريخ النشر
2016-03-09
·
تاريخ التحديث
2017-01-11
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
EMC Documentum xCP versions 2.1 before patch 24
EMC Documentum xCP versions 2.2 before patch 12
Description
The issue allows remote authenticated users to obtain sensitive user-account metadata. This is achieved via a "members/xcp member" API endpoint.
Recommendations
For EMC Documentum xCP version 2.1, apply patch 24 to resolve the issue.
For EMC Documentum xCP version 2.2, apply patch 12 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾