CVE-2014-4626
HighSummary
The vulnerability in EMC Documentum Content Server before version 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by manipulating dm_job and dm_job_request objects.
Risk Assessment
The organization may be exposed to unauthorized privilege escalation, potentially leading to serious data security breaches.
Recommendation
It is recommended to upgrade to the latest version of EMC Documentum Content Server to mitigate this vulnerability.
Other vulnerabilities in EMC Documentum Content Server
See all- CVE-2015-4544High
EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, allowing remote authenticated users to obtain superuser privileges via crafted object operations.
- CVE-2015-4535High
In Java Method Server (JMS) in EMC Documentum Content Server before versions 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, remote authenticated users can gain super-user privileges by leveraging the ability to read a log file containing a login ticket.
- CVE-2015-4534High
Java Method Server (JMS) in EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.
- CVE-2015-4533High
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, allowing remote authenticated users to execute arbitrary code with super-user privileges via a custom script.
- CVE-2015-4532High
EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not restrict object types, allowing remote authenticated users to run save RPC commands with super-user privileges and execute arbitrary code.
- CVE-2015-4531High
EMC Documentum Content Server before version 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, allowing remote authenticated sysadmins to gain super-user privileges and bypass intended restrictions on data access and server actions.
- CVE-2014-4629High
EMC Documentum Content Server versions 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allow remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.
- CVE-2014-4622High
EMC Documentum Content Server before version 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups. This allows remote authenticated sysadmins to gain super-user privileges and bypass intended restrictions on data access and server actions.
- CVE-2014-4621High
EMC Documentum Content Server before version 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types. This allows remote authenticated users to obtain super-user privileges for system-object creation and bypass intended restrictions on data access and server actions.
- CVE-2014-4618High
EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object.
Original NVD description (English source)
EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.