CVE-2012-0398 Auth bypass in n/a
Remote attackers can hijack or replay sessions due to improper session cookie validation in EMC Documentum eRoom.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-0398?
CVE-2012-0398 is a high-severity authentication bypass vulnerability in n/a, published on 15 Mar 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2012-0398?
It affects 1 product.
Products include Emc Documentum Eroom.
How do I fix CVE-2012-0398?
No fix has been published for CVE-2012-0398 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2012-0398 being exploited?
There is no known exploitation of CVE-2012-0398 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2011-1741 Memory corruption in n/a
- CVE-2017-2766 Auth bypass in EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01
- CVE-2011-2739 File upload in n/a
- CVE-2013-3286 Cross-site scripting in n/a
- CVE-2012-0404 Cross-site scripting in n/a
Sources
Also known as GHSA-8pr8-j4gw-89pw.