Authorization

2015-08-2010:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.

CPENameOperatorVersion
documentum_content_servereq6.7 sp2
documentum_content_servereq7.0
documentum_content_servereq7.2
documentum_content_servereq7.1
documentum_content_servereq6.7 sp1

Name	Operator	Version
documentum_content_server	eq	6.7 sp2
documentum_content_server	eq	7.0
documentum_content_server	eq	7.2
documentum_content_server	eq	7.1
documentum_content_server	eq	6.7 sp1