CVE

Id
71923  
CVE No.
CVE-2014-4626  
Status
Candidate  
Description
EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object"s owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682484 71923 CVE-2014-4626 MISC:https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing  View
682485 71923 CVE-2014-4626 CERT-VN:VU#315340  View
682486 71923 CVE-2014-4626 URL:http://www.kb.cert.org/vuls/id/315340  View
682487 71923 CVE-2014-4626 CERT-VN:VU#386056  View
682488 71923 CVE-2014-4626 URL:http://www.kb.cert.org/vuls/id/386056  View
682489 71923 CVE-2014-4626 CERT-VN:VU#874632  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18566 JVNDB-2014-007441 EMC Replication Manager における権限を取得される脆弱性 EMC Replication Manager には、引用符で囲まれていない Windows 検索パスにより、権限を取得される脆弱性が存在します。 CVE-2014-4634 71923 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007441.html  View