CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:S/C:C/I:C/A:C
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
emcdocumentum_content_server
𝑥
≤ 6.7
emcdocumentum_content_server
6.0
emcdocumentum_content_server
6.5
emcdocumentum_content_server
6.5:sp1
emcdocumentum_content_server
6.5:sp2
emcdocumentum_content_server
6.5:sp3
emcdocumentum_content_server
6.6
emcdocumentum_content_server
6.7
emcdocumentum_content_server
6.7:sp1
emcdocumentum_content_server
7.0
emcdocumentum_content_server
7.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html
http://secunia.com/advisories/61251
http://www.securityfocus.com/bid/69819
http://www.securitytracker.com/id/1030855
https://exchange.xforce.ibmcloud.com/vulnerabilities/95990
http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html
http://secunia.com/advisories/61251
http://www.securityfocus.com/bid/69819
http://www.securitytracker.com/id/1030855
https://exchange.xforce.ibmcloud.com/vulnerabilities/95990