NVD

Id
30931  
Name
CVE-2014-2513  
Description
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script.  
Reject
 
CVSS Version
2  
CVSS Score
8.2  
Severity
High  
CVSS Base Score
8.2  
CVSS Impact Subscore
9.5  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:P)  
Pub Date
2017-01-19  
Published
2014-07-08  
Modified Date
2017-01-06  
Seq
2014-2513  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162661 30931 CVE-2014-2513 20140707 ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities  View
162662 30931 CVE-2014-2513 68435  View
162663 30931 CVE-2014-2513 1030529  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14368 JVNDB-2014-003243 EMC Documentum Content Server におけるスーパーユーザ権限で任意のコードを実行される脆弱性 EMC Documentum Content Server は、オブジェクト作成後の認証を適切にチェックしないため、スーパーユーザ権限で任意のコードを実行される脆弱性が存在します。 CVE-2014-2513 69800 CVE-2014-2513 30931 8.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003243.html 2014-07-07 2014-07-09 View