CVE-2015-4529

Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://seclists.org/bugtraq/2015/Jul/81
http://www.securityfocus.com/bid/75930
http://www.securitytracker.com/id/1032965
http://seclists.org/bugtraq/2015/Jul/81
http://www.securityfocus.com/bid/75930
http://www.securitytracker.com/id/1032965

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:documentum_administrator::::::::
	cpe:2.3:a:emc:documentum_digital_asset_manager::sp6::::::*
	cpe:2.3:a:emc:documentum_taskspace::sp2::::::*
	cpe:2.3:a:emc:documentum_web_publisher::sp7::::::*
	cpe:2.3:a:emc:documentum_webtop::::::::

History

21 Nov 2024, 02:31

Type	Values Removed	Values Added
References	~~() http://seclists.org/bugtraq/2015/Jul/81 -~~	() http://seclists.org/bugtraq/2015/Jul/81 -
References	~~() http://www.securityfocus.com/bid/75930 -~~	() http://www.securityfocus.com/bid/75930 -
References	~~() http://www.securitytracker.com/id/1032965 -~~	() http://www.securitytracker.com/id/1032965 -

Information

Published : 2015-07-16 21:59

Updated : 2024-11-21 02:31

NVD link : CVE-2015-4529

Mitre link : CVE-2015-4529

CVE.ORG link : CVE-2015-4529

JSON object : View

Products Affected

emc

documentum_administrator
documentum_taskspace
documentum_web_publisher
documentum_webtop
documentum_digital_asset_manager

CWE

NVD-CWE-Other

{"id": "CVE-2015-4529", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-07-16T21:59:03.497", "references": [{"url": "http://seclists.org/bugtraq/2015/Jul/81", "source": "security_alert@emc.com"}, {"url": "http://www.securityfocus.com/bid/75930", "source": "security_alert@emc.com"}, {"url": "http://www.securitytracker.com/id/1032965", "source": "security_alert@emc.com"}, {"url": "http://seclists.org/bugtraq/2015/Jul/81", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/75930", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032965", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL."}, {"lang": "es", "value": "Vulnerabilidad de redirecci\u00f3n abierta en EMC Documentum WebTop anterior a 6.8P02, Documentum Administrator anterior a 7.2P01, Documentum Digital Assets Manager hasta 6.5SP6, Documentum Web Publishers hasta 6.5SP7 y Documentum Task Space hasta 6.7SP2, permite a atacantes remotos redirigir a usuarios hacia p\u00e1ginas web arbitrarias y llevar a cabo ataques de phishing por medio de una URL manipulada."}], "lastModified": "2024-11-21T02:31:16.803", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:documentum_administrator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0F3BD69-53DE-4F10-ABFA-33B423A74C9E", "versionEndIncluding": "7.2"}, {"criteria": "cpe:2.3:a:emc:documentum_digital_asset_manager:*:sp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EB25D60-1424-422A-959C-9C1D670F6155", "versionEndIncluding": "6.5"}, {"criteria": "cpe:2.3:a:emc:documentum_taskspace:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3270E32-E010-4E39-8E9E-6B05AAC89492", "versionEndIncluding": "6.7"}, {"criteria": "cpe:2.3:a:emc:documentum_web_publisher:*:sp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE6BEA80-2CBE-4A46-97D5-ABD5EF47207C", "versionEndIncluding": "6.5"}, {"criteria": "cpe:2.3:a:emc:documentum_webtop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D66CB470-DF43-4995-842D-AAB3B259976F", "versionEndIncluding": "6.8"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/601.html\">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>", "sourceIdentifier": "security_alert@emc.com"}