NVD

Id
32581  
Name
CVE-2014-4622  
Description
EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-09-17  
Modified Date
2017-01-06  
Seq
2014-4622  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171628 32581 CVE-2014-4622 20140915 ESA-2014-091: EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities  View
171629 32581 CVE-2014-4622 61251  View
171630 32581 CVE-2014-4622 69819  View
171631 32581 CVE-2014-4622 1030855  View
171632 32581 CVE-2014-4622 emc-documentum-cve20144622-priv-esc(95990)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15373 JVNDB-2014-004248 EMC Documentum Content Server におけるスーパーユーザ権限を取得される脆弱性 EMC Documentum Content Server は、特権グループのサブグループの認証を適切にチェックしないため、スーパーユーザ権限を取得され、データアクセスおよびサーバアクションの制限を回避される脆弱性が存在します。 CVE-2014-4622 71911 CVE-2014-4622 32581 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004248.html 2014-09-15 2014-09-18 View