CVE-2014-4629
Summary
| CVE | CVE-2014-4629 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-12-06 15:59:00 UTC |
| Updated | 2018-10-09 19:49:00 UTC |
| Description | EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Emc | Documentum Content Server | 6.7 | All | All | All |
| Application | Emc | Documentum Content Server | 6.7 | sp1 | All | All |
| Application | Emc | Documentum Content Server | 6.7 | sp2 | All | All |
| Application | Emc | Documentum Content Server | 7.0 | All | All | All |
| Application | Emc | Documentum Content Server | 7.1 | All | All | All |
| Application | Emc | Documentum Content Server | 6.7 | All | All | All |
| Application | Emc | Documentum Content Server | 6.7 | sp1 | All | All |
| Application | Emc | Documentum Content Server | 6.7 | sp2 | All | All |
| Application | Emc | Documentum Content Server | 7.0 | All | All | All |
| Application | Emc | Documentum Content Server | 7.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| EMC Documentum Content Server Bug Let Remote Authenticated Users Gain Elevated Privileges - SecurityTracker | SECTRACK | www.securitytracker.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| EMC Documentum Content Server Insecure Direct Object Reference ≈ Packet Storm | MISC | packetstormsecurity.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| EMC Documentum Content Server CVE-2014-4629 Remote Privilege Escalation Vulnerability | BID | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.