8.5

CVE-2014-4621

EPSS 0.75%
Veröffentlicht 17.09.2014 10:55:07
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security_alert@emc.com
Teams Watchlist Login
Unerledigt Login

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Documentum Content Server Updatesp2 Version <= 6.7

Emc ≫ Documentum Content Server Version6.0

Emc ≫ Documentum Content Server Version6.5

Emc ≫ Documentum Content Server Version6.5 Updatesp1

Emc ≫ Documentum Content Server Version6.5 Updatesp2

Emc ≫ Documentum Content Server Version6.5 Updatesp3

Emc ≫ Documentum Content Server Version6.6

Emc ≫ Documentum Content Server Version6.7 Update-

Emc ≫ Documentum Content Server Version6.7 Updatesp1

Emc ≫ Documentum Content Server Version7.0

Emc ≫ Documentum Content Server Version7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.721

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.5	6.8	10	AV:N/AC:M/Au:S/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html

http://secunia.com/advisories/61251

http://www.securityfocus.com/bid/69817

http://www.securitytracker.com/id/1030855

https://exchange.xforce.ibmcloud.com/vulnerabilities/95989

https://nvd.nist.gov/vuln/detail/CVE-2014-4621

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4621

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4621

EUVD