Authorization

2015-08-2010:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.9%

JSON

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514.

CPENameOperatorVersion
documentum_content_servereq6.7 sp2
documentum_content_servereq7.0
documentum_content_servereq7.2
documentum_content_servereq7.1
documentum_content_servereq6.7 sp1

Name	Operator	Version
documentum_content_server	eq	6.7 sp2
documentum_content_server	eq	7.0
documentum_content_server	eq	7.2
documentum_content_server	eq	7.1
documentum_content_server	eq	6.7 sp1