EMC Documentum Content Server Remote Privilege Escalation Vulnerability

Bugtraq ID:	67917
Class:	Design Error
CVE:	CVE-2014-2506
Remote:	Yes
Local:	No
Published:	Jun 05 2014 12:00AM
Updated:	Jun 09 2014 01:03AM
Credit:	The vendor reported this issue.
Vulnerable:	EMC Documentum Content Server 6.7 EMC Documentum Content Server 6.6 EMC Documentum Content Server 6.5 EMC Documentum Content Server 6.0 EMC Documentum Content Server 5
Not Vulnerable:

EMC Documentum Content Server Remote Privilege Escalation Vulnerability

EMC Documentum Content Server is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated privileges and perform unauthorized actions.

The following products are vulnerable:

EMC Documentum Content Server versions of 7.1
EMC Documentum Content Server versions of 7.0
EMC Documentum Content Server versions of 6.7 SP2
EMC Documentum Content Server versions of 6.7 SP1
EMC Documentum Content Server versions prior to 6.7 SP1

EMC Documentum Content Server Remote Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC Documentum Content Server Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC Documentum Content Server Remote Privilege Escalation Vulnerability

References:

• EMC Homepage (EMC)