CVE-2017-2766 in Documentum eRoom

Summary

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/01/2016
• Disclosure: 02/03/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-96509
• CPE: ready
• CWE: CWE-640 (Confirmed)
• CVSS: 8.5
• EPSS: 0.00786
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2766
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2766
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2766/