NVD

Id
32587  
Name
CVE-2014-4629  
Description
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-06  
Modified Date
2014-12-08  
Seq
2014-4629  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171657 32587 CVE-2014-4629 http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html  View
171658 32587 CVE-2014-4629 20141202 ESA-2014-156: EMC Documentum Content Server Insecure Direct Object Reference Vulnerability  View
171659 32587 CVE-2014-4629 71422  View
171660 32587 CVE-2014-4629 1031298  View
171661 32587 CVE-2014-4629 emc-documentum-cve20144629-priv-esc(99085)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16930 JVNDB-2014-005805 EMC Documentum Content Server における任意のファイルを読まれる脆弱性 EMC Documentum Content Server には、安全でない直接のオブジェクト参照に関する処理に不備があるため、任意のファイルを読まれる、または削除される脆弱性が存在します。 CVE-2014-4629 71918 CVE-2014-4629 32587 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005805.html 2014-12-03 2014-12-10 View