VULNERABILITY INTELLIGENCE

CVE-2017-2766

CVSS score9.8 CRITICAL

EPSS probability1.63%

CISA KEVNot currently listed

Published2017-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Weakness classification

CWE-640: Weak Password Recovery Mechanism for Forgotten Password

Primary references

security_alert@emc.com — Patch, Third Party Advisory, VDB Entry
security_alert@emc.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry