NVD

Id
30932  
Name
CVE-2014-2514  
Description
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
8.2  
Severity
High  
CVSS Base Score
8.2  
CVSS Impact Subscore
9.5  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:P)  
Pub Date
2017-01-19  
Published
2014-07-08  
Modified Date
2017-01-06  
Seq
2014-2514  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162664 30932 CVE-2014-2514 20140707 ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities  View
162665 30932 CVE-2014-2514 68436  View
162666 30932 CVE-2014-2514 1030529  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14369 JVNDB-2014-003244 EMC Documentum Content Server におけるスーパーユーザ権限で RPC コマンドを保存実行される脆弱性 EMC Documentum Content Server は、認証を適切にチェックしない、およびオブジェクトのタイプを適切に制限しないため、スーパーユーザ権限で RPC コマンドを保存実行され、その結果、任意のコードを実行される脆弱性が存在します。 CVE-2014-2514 69801 CVE-2014-2514 30932 8.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003244.html 2014-07-07 2014-07-09 View