Lucene search
DellCVE-2015-0518HistoryFeb 14, 2015 - 3:59 p.m.
CVE-2015-0518
2015-02-1415:59:01
CWE-264
dell
web.nvd.nist.gov
30
cve-2015-0518
emc documentum
d2
web-service
remote authentication
superuser privileges
vulnerability
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
75.2%
The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.
Affected configurations
Node
emcdocumentum_d2Match3.1-
ORemcdocumentum_d2Match3.1sp1
ORemcdocumentum_d2Match4.0
ORemcdocumentum_d2Match4.1
ORemcdocumentum_d2Match4.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| emc | documentum_d2 | 3.1 | cpe:2.3:a:emc:documentum_d2:3.1:-:*:*:*:*:*:* |
| emc | documentum_d2 | 3.1 | cpe:2.3:a:emc:documentum_d2:3.1:sp1:*:*:*:*:*:* |
| emc | documentum_d2 | 4.0 | cpe:2.3:a:emc:documentum_d2:4.0:*:*:*:*:*:*:* |
| emc | documentum_d2 | 4.1 | cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:* |
| emc | documentum_d2 | 4.2 | cpe:2.3:a:emc:documentum_d2:4.2:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2015-0518
2015-02-14 15:59:01
prion
prion
Design/Logic Flaw
2015-02-14 15:59:00
cvelist
cvelist
CVE-2015-0518
2015-02-14 15:00:00
securityvulns
securityvulns
ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities
2015-02-23 00:00:00
EMC Documentum multiple security vulnerabilities
2015-09-14 00:00:00
nessus
nessus
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
75.2%
Related for CVE-2015-0518