Design/Logic Flaw

Java Method Server JMS in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the methodverb parameter...

Authorization

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, an...

Design/Logic Flaw

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file...

Authorization

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom scrip...

CVE-2015-4531

The CVE-2015-4531 issue affects EMC Documentum Content Server prior to the specified patches: 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02. Root cause is an incomplete fix for CVE-2014-4622, leading to improper authorization checks for subgroups of privileged ...

CVE-2015-4532

CVE-2015-4532 affects EMC Documentum Content Server prior to specific service packs/patch levels (6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, 7.2 before P02). The root cause is insufficient authorization checks and lack of proper restriction of object types, enabling remote aut...

CVE-2015-4535

CVE-2015-4535 affects EMC Documentum Content Server where Java Method Server (JMS) can be exploited when debug_trace is enabled to let remote authenticated users gain super-user privileges by reading a log containing a login ticket. This is part of a set of vulnerabilities in the ESA-2015-131 adv...

CVE-2015-4533

CVE-2015-4533 affects EMC Documentum Content Server (versions listed: 6.7SP1 P32 and earlier, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, 7.2 before P02). The issue: after object creation, authorization is not properly checked, allowing remote authenticated users to execute arbitrary code ...

CVE-2015-4536

Summary (CVE-2015-4536) EMC Documentum Content Server versions affected are 7.0 prior to P20, 7.1 prior to P18, and 7.2 prior to P02. When RPC tracing is enabled, obfuscated passwords of users with inline authentication are written to the log file in clear text, enabling a remote authenticated at...

CVE-2015-4534

EMC Documentum Content Server’s Java Method Server (JMS) contains a vulnerability (CVE-2015-4534) where JMS fails to validate signatures for query strings missing the method_verb parameter, allowing remote authenticated users to forge signatures and execute arbitrary code in the JMS context. Affe...

CVE-2015-4535

Java Method Server JMS in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when debugtrace is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing ...

CVE-2015-4533

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom scrip...

CVE-2015-4532

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, an...

CVE-2015-4531

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended...

CVE-2015-4534

Java Method Server JMS in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the methodverb parameter...

CVE-2015-4536

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05447)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05445)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Privilege Vulnerability

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Code Execution Vulnerability (CNVD-2015-05461)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote code execution vulnerability exists in EMC Documentum Content Server. An attacker...