CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

Authorization

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

Authorization

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4621

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4621

EMC Documentum Content Server is affected by CVE-2014-4621. The issue stems from improper authorization checks on subtypes of protected system types, allowing remote authenticated users to create system objects with super‑user privileges and bypass restrictions on data access and server actions. ...

CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

CVE-2014-4622

EMC Documentum Content Server is affected by multiple privilege-escalation vulnerabilities (CVE-2014-4622, CVE-2015-4531/4532/4533/4534/4535/4536) across versions prior to 6.7SP1 P32, 6.7SP2 P25, 7.0 P19, 7.1 P16, and 7.2 P02. The root cause involves improper authorization checks for subgroups wi...

PT-2014-6029

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP2 P17 EMC Documentum Content Server versions 7.0 through P15 EMC Documentum Content Server versions prior to 7.1 P08 Description The issue allows remote authenticated sysadmins to gain...

PT-2014-6028

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions 7.0 through P15 EMC Documentum Content Server version 7.1 before P08 EMC Documentum Content Server before 6.7 SP2 P17 Description The issue allows remote authenticated users to obtain super-user privilege...

CVE-2014-4621: Undefined Security Weakness

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4622: Undefined Security Weakness

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

EMC Documentum Content Server Detection

Binary data emcdocumentumcontentserverinstalled.nbin...

EMC Documentum Content Server Multiple Vulnerabilities (ESA-2014-079)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions or allows denial of service attacks. Note that this issue is exploitable only...

EMC Documentum Content Server Multiple Vulnerabilities (ESA-2014-046)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper authorization checks. A remote, authenticated attacker can exploit this vulnerability to access data or execute comman...

EMC Documentum Content Server Multiple Vulnerabilities (ESA-2014-064)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper authorization checks. A remote, authenticated attacker can exploit this vulnerability to execute arbitrary code via a...

EMC Documentum Content Server Information Disclosure (ESA-2014-026)

The remote host is running a version of EMC Documentum Content Server that is affected by an information disclosure vulnerability due to improper authorization checks. A remote, authenticated user can exploit this vulnerability to read metadata from folders outside of restricted folders configure...

CVE-2014-4619

EMC RSA Identity Management and Governance IMG 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager aka NovellIM is used, allows remote attackers to bypass authentication via an arbitrary valid username...

Authentication flaw

EMC RSA Identity Management and Governance IMG 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager aka NovellIM is used, allows remote attackers to bypass authentication via an arbitrary valid username...

CVE-2014-4619

RSA IMG (EMC RSA Identity Management and Governance) 6.5.x and 6.8.x are affected when Novell Identity Manager is used, enabling authentication bypass with a valid username. Root cause: authentication bypass due to NovellIM-based setup; no password required for legitimate users. Affected versions...

CVE-2014-4619

EMC RSA Identity Management and Governance IMG 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager aka NovellIM is used, allows remote attackers to bypass authentication via an arbitrary valid username...