Lucene search

[email protected]CVE-2014-4621

HistorySep 17, 2014 - 10:55 a.m.

CVE-2014-4621

2014-09-1710:55:00

CWE-264

[email protected]

web.nvd.nist.gov

emc

documentum

content server

authorization

bypass

cve-2014-4621

nvd

6.4 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.4%

JSON

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors.

CPENameOperatorVersion
emc:documentum_content_serveremc documentum content servereq6.7
emc:documentum_content_serveremc documentum content servereq7.0
emc:documentum_content_serveremc documentum content servereq6.0
emc:documentum_content_serveremc documentum content servereq6.5
emc:documentum_content_serveremc documentum content servereq6.6
emc:documentum_content_serveremc documentum content servereq7.1

CPE	Name	Operator	Version
emc:documentum_content_server	emc documentum content server	eq	6.7
emc:documentum_content_server	emc documentum content server	eq	7.0
emc:documentum_content_server	emc documentum content server	eq	6.0
emc:documentum_content_server	emc documentum content server	eq	6.5
emc:documentum_content_server	emc documentum content server	eq	6.6
emc:documentum_content_server	emc documentum content server	eq	7.1

References

archives.neohapsis.com/archives/bugtraq/2014-09/0093.html

secunia.com/advisories/61251

www.securityfocus.com/bid/69817

www.securitytracker.com/id/1030855

exchange.xforce.ibmcloud.com/vulnerabilities/95989

6.4 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.4%

JSON

Related for CVE-2014-4621

prion1 securityvulns1 nessus1