« Back to list

CVE-2012-0398

Status: ModifiedHigh (7.5)—

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

EMC — Documentum Eroom

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-0398",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-15T00:55:01.147",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-03/0057.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "EMC Documentum eRoom antes de v7.4.4 no valida correctamente las cookies de sesión, lo que permite a atacantes remotos secuestrar o reproducir las sesiones a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:37:13.017",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C61101D-8756-4112-BBCF-DA0C70B3C838",
              "versionEndIncluding": "7.4.3"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DED9961A-3C29-48C5-8F3B-3D8A1E1F98DD"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAC26B9F-C61A-48C2-89CD-33A0569536BA"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34579A31-D4C9-4658-ACC4-78588C69F564"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}