Unscored severity · published Jul 8, 2014
CVE-2014-2513
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization after creation of an object, which…
–
CVSS
2.9%
EPSS
No
On KEV
Description
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Documentum Content Server · Emc
through 6.7; 6.7; 6.7; 7.0; 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2513
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2513
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2014-07/0024.html
secunia.com
http://secunia.com/advisories/59757
www.securityfocus.com
http://www.securityfocus.com/bid/68435
www.securitytracker.com
http://www.securitytracker.com/id/1030529
More from Documentum Content Server
–
CVE-2015-4544
EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to…
–
CVE-2015-4536
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which…
–
CVE-2015-4535
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is…
–
CVE-2015-4534
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated…
–
CVE-2015-4533
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an…