Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01 Documentum Administrator through 7.2 Documentum Digital Assets Manager through 6.5SP6 Documentum Web Publishers through 6.5SP7 and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the authentication of arbitrary users. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2518.