CVE

Id
71918  
CVE No.
CVE-2014-4621  
Status
Candidate  
Description
EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682440 71918 CVE-2014-4621 BUGTRAQ:20140915 ESA-2014-091: EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities  View
682441 71918 CVE-2014-4621 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html  View
682442 71918 CVE-2014-4621 BID:69817  View
682443 71918 CVE-2014-4621 URL:http://www.securityfocus.com/bid/69817  View
682444 71918 CVE-2014-4621 SECTRACK:1030855  View
682445 71918 CVE-2014-4621 URL:http://www.securitytracker.com/id/1030855  View
682446 71918 CVE-2014-4621 SECUNIA:61251  View
682447 71918 CVE-2014-4621 URL:http://secunia.com/advisories/61251  View
682448 71918 CVE-2014-4621 XF:emc-documentum-cve20144621-priv-esc(95989)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16930 JVNDB-2014-005805 EMC Documentum Content Server における任意のファイルを読まれる脆弱性 EMC Documentum Content Server には、安全でない直接のオブジェクト参照に関する処理に不備があるため、任意のファイルを読まれる、または削除される脆弱性が存在します。 CVE-2014-4629 71918 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005805.html  View