CVE-2016-0886 in Documentum xCP

Summary

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/17/2015
• Disclosure: 03/09/2016
• Moderation: VulDB entry created
• Entries: VDB-81309 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00202
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0886
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0886
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0886/