5.8

CVE-2013-0937

EPSS 1.09%
Veröffentlicht 10.05.2013 11:42:29
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Documentum Records Manager Version 6.7

Emc ≫ Documentum Records Manager Version 6.7 Update sp1

Emc ≫ Documentum Taskspace Version 6.7

Emc ≫ Documentum Taskspace Version 6.7 Update sp1

Emc ≫ Documentum Wdk Version 6.7

Emc ≫ Documentum Wdk Version 6.7 Update sp1

Emc ≫ Documentum Webtop Version 6.7

Emc ≫ Documentum Webtop Version 6.7 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.09%	0.61

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://archives.neohapsis.com/archives/bugtraq/2013-05/0037.html

https://nvd.nist.gov/vuln/detail/CVE-2013-0937

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0937

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0937

EUVD