« Volver al listado

CVE-2017-2766

Estado: ModificadaCrítica (9.8)—

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Documentum Eroom

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-2766",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01",
          "versions": [
            {
              "status": "affected",
              "version": "EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-03T07:59:00.560",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/540077/30/0/threaded",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/95893",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/540077/30/0/threaded",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/95893",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-640"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system."
    },
    {
      "lang": "es",
      "value": "EMC Documentum eRoom versión 7.4.4, EMC Documentum eRoom versión 7.4.4 SP1, EMC Documentum eRoom versión anterior a 7.4.5 P04, EMC Documentum eRoom versión anterior a 7.5.0 P01 incluye una vulnerabilidad no verificada de cambio de contraseña que podría ser explotada por usuarios malintencionados para comprometer el sistema afectado."
    }
  ],
  "lastModified": "2026-06-17T01:16:48.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DD159D8-DCB0-4A27-BEFC-BFC626B2C200"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.4:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C44A1651-72B7-446A-98CA-18BD0E4E72D0"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76F12875-669C-43C7-9D00-164089E27D84"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.5:p01:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7ADC4B3E-A538-4A85-B084-AF4E47734C12"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.5:p02:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7E06195-1C7E-429E-8E39-CB2455741E2D"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.4.5:p03:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BED2FD3-0A0E-4C89-94BB-D02434499445"
            },
            {
              "criteria": "cpe:2.3:a:emc:documentum_eroom:7.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DCE8AD3-12F1-4952-BAE7-98F0B667595F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}