CVE-2012-0398 in Documentum eRoom

Summary

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 01/09/2012
• Disclosure: 03/14/2012
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 10.0
• EPSS: 0.00460
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0398
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0398
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0398/