Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/08/2015 Updated: 21/09/2017

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

EMC Documentum Content Server prior to 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.

Vulnerable Product	Search on Vulmon	Subscribe to Product
emc documentum content server 6.7
emc documentum content server 7.1
emc documentum content server 7.2
emc documentum content server 7.0

CWE-264 http://seclists.org/bugtraq/2015/Aug/86 http://www.securityfocus.com/bid/76411 http://www.securitytracker.com/id/1033296 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-4533

Vulnerability Summary

References

Vulmon Search

About

Products

Connect