Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-2515
HistoryAug 20, 2014 - 11:17 a.m.

CVE-2014-2515

2014-08-2011:17:00
CWE-264
[email protected]
web.nvd.nist.gov
21
cve-2014-2515
emc documentum
d2
security vulnerability
privilege escalation
nvd

6.6 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.6%

JSON

EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.

Related

prion 2
nessus 1
securityvulns 2
cve 1
cert 1
prion
prion
Design/Logic Flaw
2014-08-20 11:17:00
Command injection
2014-12-17 01:59:00
nessus
nessus
EMC Documentum D2 Privilege Escalation (ESA-2014-067)
2014-08-21 00:00:00
securityvulns
securityvulns
ESA-2014-067: EMC Documentum D2 Privilege Escalation Vulnerability
2014-08-26 00:00:00
EMC Documentum multiple security vulnerabilities
2015-09-14 00:00:00
cve
cve
CVE-2014-4626
2014-12-17 01:59:00
cert
cert
EMC Documentum products contain multiple vulnerabilities
2014-12-15 00:00:00

6.6 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.6%

JSON
Related for CVE-2014-2515
prion2nessus1securityvulns2cve1cert1