CVE-2014-4626
First published: Wed Dec 17 2014(Updated: )
EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC Documentum Content Server | <=6.7 | |
| EMC Documentum Content Server | =6.7 | |
| EMC Documentum Content Server | =6.7-sp2 | |
| EMC Documentum Content Server | =7.0 | |
| EMC Documentum Content Server | =7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-4626?
CVE-2014-4626 is considered a medium severity vulnerability due to its exploitation potential by remote authenticated users.
How do I fix CVE-2014-4626?
To fix CVE-2014-4626, upgrade EMC Documentum Content Server to versions 6.7 SP1 P29 or newer, 6.7 SP2 P18 or newer, 7.0 P16 or newer, or 7.1 P09 or newer.
What types of users are affected by CVE-2014-4626?
CVE-2014-4626 primarily affects remote authenticated users with the ability to create or manipulate certain objects within the EMC Documentum environment.
What are the implications of exploiting CVE-2014-4626?
Exploiting CVE-2014-4626 allows a remote authenticated user to gain elevated privileges, potentially leading to unauthorized actions within the system.
Which versions of EMC Documentum Content Server are vulnerable to CVE-2014-4626?
Versions vulnerable to CVE-2014-4626 include EMC Documentum Content Server prior to 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/author
- agent/first-publish-date
- agent/source
- vendor/emc
- canonical/emc documentum content server
- version/emc documentum content server/6.7
- version/emc documentum content server/6.7-sp2
- version/emc documentum content server/7.0
- version/emc documentum content server/7.1