Description
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
References
- 20160404 ESA-2016-034: EMC Documentum D2 Configuration Object Vulnerability mailing-list
- 1035459 vdb-entry