{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-04-11T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-04-15T22:57:00", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"name": "20140411 ESA-2014-026: EMC Documentum Content Server Information Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html"}, {"tags": ["x_refsource_MISC"], "url": "http://twitter.com/artika4biz/statuses/455358950116823040"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2014-0642", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20140411 ESA-2014-026: EMC Documentum Content Server Information Disclosure Vulnerability", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html"}, {"name": "http://twitter.com/artika4biz/statuses/455358950116823040", "refsource": "MISC", "url": "http://twitter.com/artika4biz/statuses/455358950116823040"}]}}}}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2014-0642", "datePublished": "2014-04-15T23:00:00", "dateReserved": "2014-01-02T00:00:00", "dateUpdated": "2014-04-15T22:57:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:emc:documentum_content_server:*:sp1:*:*:*:*:*:*", "matchCriteriaId": "7B188672-1EC2-4338-A868-BD562962D356", "versionEndIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "FDBAEC8D-D945-48CA-84DD-EDBE8029F636", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "730510E9-1AE8-44BF-A1DE-5ED40F22D0B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp1:*:*:*:*:*:*", "matchCriteriaId": "CC8840D2-5DE8-4EB6-A03F-BFF1C8A9BF1B", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp2:*:*:*:*:*:*", "matchCriteriaId": "3AC51C95-97DC-44B4-9935-9423CE60289A", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp3:*:*:*:*:*:*", "matchCriteriaId": "0ACB8EDE-C6AF-4B85-83ED-74097A206B49", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.6:*:*:*:*:*:*:*", "matchCriteriaId": "25CD1EE0-4E72-4C42-857B-AA45F0A17BBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.7:-:*:*:*:*:*:*", "matchCriteriaId": "49659818-958F-4B5E-8DA4-B592C67DD13F", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.7:sp2:*:*:*:*:*:*", "matchCriteriaId": "B4E00544-98F6-439C-8F4D-822FCAE775CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "8335062A-5A8E-4076-B351-7DFA19CEC818", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "B283F797-6DAA-40E1-9FAB-16FCAA5241B4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors."}, {"lang": "es", "value": "EMC Documentum Content Server anterior a 6.7 SP1 P26, 6.7 SP2 anterior a P13, 7.0 anterior a P13 y 7.1 anterior a P02 permite a usuarios remotos autenticados evadir restricciones de acceso y leer metadatos de ciertos ficheros a trav\u00e9s de vectores no especificados."}], "id": "CVE-2014-0642", "lastModified": "2014-04-16T14:03:42.857", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-04-15T23:13:16.790", "references": [{"source": "security_alert@emc.com", "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0072.html"}, {"source": "security_alert@emc.com", "url": "http://twitter.com/artika4biz/statuses/455358950116823040"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}