BID:68436

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

Info

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

Bugtraq ID:	68436
Class:	Design Error
CVE:	CVE-2014-2514
Remote:	Yes
Local:	No
Published:	Jul 07 2014 12:00AM
Updated:	Dec 16 2014 06:57AM
Credit:	The vendor reported this issue.
Vulnerable:	EMC Documentum Content Server 6.7 EMC Documentum Content Server 6.6 EMC Documentum Content Server 6.5 EMC Documentum Content Server 6.0 EMC Documentum Content Server 5

Not Vulnerable:

Discussion

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

EMC Documentum Content Server is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to execute arbitrary code with elevated privileges.

The following products are vulnerable:

EMC Documentum Content Server versions of 7.1
EMC Documentum Content Server versions of 7.0
EMC Documentum Content Server versions of 6.7 SP2
EMC Documentum Content Server versions of 6.7 SP1
EMC Documentum Content Server versions prior to 6.7 SP1

Exploit / POC

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

References

EMC Documentum Content Server CVE-2014-2514 Remote Privilege Escalation Vulnerability

References:

EMC Homepage (EMC)