NVD

Id
42505  
Name
CVE-2012-0396  
Description
EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-02-06  
Modified Date
2012-02-08  
Seq
2012-0396  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214147 42505 CVE-2012-0396 20120203 ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability  View
214148 42505 CVE-2012-0396 1026639  View
214149 42505 CVE-2012-0396 51863  View
214150 42505 CVE-2012-0396 emc-documentum-info-disc(72994)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25615 JVNDB-2012-001322 EMC Documentum xPlore におけるオブジェクトの存在を特定される脆弱性 EMC Documentum xPlore は、BROWSE 権限の要求を行わないため、オブジェクトの存在を特定される、または オブジェクト metadata を読まれる脆弱性が存在します。 CVE-2012-0396 53634 CVE-2012-0396 42505 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001322.html 2012-02-06 2012-02-08 View