Unscored severity · published Sep 17, 2014
CVE-2014-4621
EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows…
–
CVSS
2.6%
EPSS
No
On KEV
Description
EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Documentum Content Server · Emc
through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4621
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4621
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html
secunia.com
http://secunia.com/advisories/61251
www.securityfocus.com
http://www.securityfocus.com/bid/69817
www.securitytracker.com
http://www.securitytracker.com/id/1030855
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95989
More from Documentum Content Server
–
CVE-2015-4544
EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to…
–
CVE-2015-4536
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which…
–
CVE-2015-4535
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is…
–
CVE-2015-4534
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated…
–
CVE-2015-4533
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an…