Unintended ACL Vulnerability in EMC Documentum D2 before 4.6

CVE-2016-0888 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.

Learn more about our User Device Pen Test.