NVD
- Id
- 32584
- Name
- CVE-2014-4626
- Description
- EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object"s owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.
- Reject
- CVSS Version
- 2
- CVSS Score
- 9
- Severity
- High
- CVSS Base Score
- 9
- CVSS Impact Subscore
- 10
- CVSS Exploit Subscore
- 8
- CVSS Vector
- (AV:N/AC:L/Au:S/C:C/I:C/A:C)
- Pub Date
- 2017-01-19
- Published
- 2014-12-16
- Modified Date
- 2014-12-17
- Seq
- 2014-4626