CVE-2012-0396 Information

Description

EMC Documentum xPlore 1.0 1.1 before P07 and 1.2 does not properly enforce the requirement for BROWSE permission which allows remote authenticated users to determine the existence of an object or read object metadata via a search.

Reference

http://archives.neohapsis.com/archives/bugtraq/2012-02/0020.html http://secunia.com/advisories/47920 http://securitytracker.com/id?1026639 http://www.securityfocus.com/bid/51863 https://exchange.xforce.ibmcloud.com/vulnerabilities/72994