CVE-2014-4622: High severity opentext documentum content server vulnerability
EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4622?
CVE-2014-4622 is considered a high severity vulnerability due to its potential to allow unauthorized super-user privileges.
How do I fix CVE-2014-4622?
To fix CVE-2014-4622, upgrade EMC Documentum Content Server to version 6.7 SP2 P17 or later, or 7.1 P08 or later.
Who is affected by CVE-2014-4622?
CVE-2014-4622 affects remote authenticated sysadmins using EMC Documentum Content Server versions prior to 6.7 SP2 P17, 7.0 P15, and 7.1 P08.
What types of attacks can exploit CVE-2014-4622?
CVE-2014-4622 can be exploited to escalate privileges and bypass access restrictions to sensitive data and server actions.
Is there a workaround for CVE-2014-4622?
There is no official workaround for CVE-2014-4622; the only mitigation is to apply the recommended updates.