Lucene search

[email protected]CVE-2015-4524

HistoryJul 04, 2015 - 2:59 p.m.

CVE-2015-4524

2015-07-0414:59:00

CWE-434

[email protected]

web.nvd.nist.gov

vulnerability

emc documentum

webtop

file upload

remote code execution

nvd

7.5 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.1%

JSON

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.

CPENameOperatorVersion
emc:documentum_webtopemc documentum webtopeq6.7
emc:documentum_administratoremc documentum administratoreq6.7
emc:documentum_administratoremc documentum administratoreq7.2
emc:documentum_webtopemc documentum webtopeq6.8
emc:documentum_taskspaceemc documentum taskspaceeq6.7
emc:documentum_administratoremc documentum administratoreq7.1
emc:documentum_digital_asset_manageremc documentum digital asset managereq6.5
emc:documentum_web_publisheremc documentum web publishereq6.5
emc:documentum_administratoremc documentum administratoreq7.0

CPE	Name	Operator	Version
emc:documentum_webtop	emc documentum webtop	eq	6.7
emc:documentum_administrator	emc documentum administrator	eq	6.7
emc:documentum_administrator	emc documentum administrator	eq	7.2
emc:documentum_webtop	emc documentum webtop	eq	6.8
emc:documentum_taskspace	emc documentum taskspace	eq	6.7
emc:documentum_administrator	emc documentum administrator	eq	7.1
emc:documentum_digital_asset_manager	emc documentum digital asset manager	eq	6.5
emc:documentum_web_publisher	emc documentum web publisher	eq	6.5
emc:documentum_administrator	emc documentum administrator	eq	7.0

References

seclists.org/bugtraq/2015/Jul/9

www.securitytracker.com/id/1032770

7.5 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.1%

JSON

Related for CVE-2015-4524

prion1 cvelist1 securityvulns2