CVE-2016-6644 Information disclosure in n/a

What is CVE-2016-6644?

CVE-2016-6644 is a medium-severity vulnerability in n/a, published on 17 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value.

Weakness: CWE-264, CWE-200

Which versions are affected by CVE-2016-6644?

It affects 1 product.

Products include Emc Documentum D2.

How do I fix CVE-2016-6644?

No fix has been published for CVE-2016-6644 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6644 being exploited?

There is no known exploitation of CVE-2016-6644 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-0518 Privilege escalation in n/a Critical 9.0
• CVE-2014-2504 Missing authorization in n/a Critical 9.0
• CVE-2016-0888 Missing authorization in n/a High 8.8
• CVE-2014-2515 Privilege escalation in n/a High 8.5
• CVE-2016-9873 SQL injection in EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 Medium 6.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-ggrp-x3mg-77w5.