Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC Documentum eRoom 任意文件上传漏洞
Vulnerability Description
EMC Documentum eRoom是美国易安信(EMC)公司的一套基于Web的共享工作平台,项目人员可通过Web利用该平台存储项目内容、交流并共享观点、分配任务以及管理交付成果。 EMC Documentum eRoom中存在任意文件上传漏洞。由于应用程序没有正确限制访问某些函数,攻击者可利用该漏洞上传任意文件及以管理员特权执行任意代码,成功的利用该漏洞将会危害受影响的计算机。
CVSS Information
N/A
Vulnerability Type
N/A