CVE

Id
71936  
CVE No.
CVE-2014-4639  
Status
Candidate  
Description
EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682542 71936 CVE-2014-4639 BUGTRAQ:20150105 ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities  View
682543 71936 CVE-2014-4639 URL:http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html  View
682544 71936 CVE-2014-4639 MISC:http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html  View
682545 71936 CVE-2014-4639 SECTRACK:1031497  View
682546 71936 CVE-2014-4639 URL:http://www.securitytracker.com/id/1031497  View
682547 71936 CVE-2014-4639 XF:documentum-wdk-cve20144639-weak-security(99636)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14816 JVNDB-2014-003691 Embarcadero ER/Studio Data Architect の TSVisualization ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 Embarcadero ER/Studio Data Architect の TSVisualization ActiveX コントロールの loadExtensionFactory メソッドには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-4647 71936 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003691.html  View