Lucene search

K
cveDellCVE-2014-2521
HistoryAug 20, 2014 - 11:17 a.m.

CVE-2014-2521

2014-08-2011:17:13
CWE-200
dell
web.nvd.nist.gov
26
emc
documentum
content server
authenticated users
sensitive object metadata
rpc command.

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

56.3%

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command.

Affected configurations

Nvd
Node
emcdocumentum_content_serverRange6.7sp2
OR
emcdocumentum_content_serverMatch6.0
OR
emcdocumentum_content_serverMatch6.5
OR
emcdocumentum_content_serverMatch6.5sp1
OR
emcdocumentum_content_serverMatch6.5sp2
OR
emcdocumentum_content_serverMatch6.5sp3
OR
emcdocumentum_content_serverMatch6.6
OR
emcdocumentum_content_serverMatch6.7-
OR
emcdocumentum_content_serverMatch6.7sp1
OR
emcdocumentum_content_serverMatch7.0
OR
emcdocumentum_content_serverMatch7.1
VendorProductVersionCPE
emcdocumentum_content_server*cpe:2.3:a:emc:documentum_content_server:*:sp2:*:*:*:*:*:*
emcdocumentum_content_server6.0cpe:2.3:a:emc:documentum_content_server:6.0:*:*:*:*:*:*:*
emcdocumentum_content_server6.5cpe:2.3:a:emc:documentum_content_server:6.5:*:*:*:*:*:*:*
emcdocumentum_content_server6.5cpe:2.3:a:emc:documentum_content_server:6.5:sp1:*:*:*:*:*:*
emcdocumentum_content_server6.5cpe:2.3:a:emc:documentum_content_server:6.5:sp2:*:*:*:*:*:*
emcdocumentum_content_server6.5cpe:2.3:a:emc:documentum_content_server:6.5:sp3:*:*:*:*:*:*
emcdocumentum_content_server6.6cpe:2.3:a:emc:documentum_content_server:6.6:*:*:*:*:*:*:*
emcdocumentum_content_server6.7cpe:2.3:a:emc:documentum_content_server:6.7:-:*:*:*:*:*:*
emcdocumentum_content_server6.7cpe:2.3:a:emc:documentum_content_server:6.7:sp1:*:*:*:*:*:*
emcdocumentum_content_server7.0cpe:2.3:a:emc:documentum_content_server:7.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

56.3%