NVD

Id
30933  
Name
CVE-2014-2515  
Description
EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-20  
Modified Date
2017-01-06  
Seq
2014-2515  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162667 30933 CVE-2014-2515 60565  View
162668 30933 CVE-2014-2515 20140818 ESA-2014-067: EMC Documentum D2 Privilege Escalation Vulnerability  View
162669 30933 CVE-2014-2515 69275  View
162670 30933 CVE-2014-2515 1030740  View
162671 30933 CVE-2014-2515 emc-documentum-cve20142515-priv-esc(95367)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15009 JVNDB-2014-003884 EMC Documentum D2 における権限を取得される脆弱性 EMC Documentum D2 は、D2GetAdminTicketMethod および D2RefreshCacheMethod が提供するチケットを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2014-2515 69802 CVE-2014-2515 30933 8.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003884.html 2014-08-18 2014-08-22 View