CVE-2012-0396

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-02-06 · updated 2026-06-16
Weakness: CWE-264

Description

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search.

Affected products

EMC Documentum Xplore: 1.0, 1.1, 1.1-p01, 1.1-p03, 1.2

References

http://archives.neohapsis.com/archives/bugtraq/2012-02/0020.html
http://secunia.com/advisories/47920
http://securitytracker.com/id?1026639
http://www.securityfocus.com/bid/51863
https://exchange.xforce.ibmcloud.com/vulnerabilities/72994
http://archives.neohapsis.com/archives/bugtraq/2012-02/0020.html
http://secunia.com/advisories/47920
http://securitytracker.com/id?1026639
http://www.securityfocus.com/bid/51863
https://exchange.xforce.ibmcloud.com/vulnerabilities/72994

Get alerted when CVE-2012-0396 or the next vulnerability affects your stack