CVE-2015-4534: Input Validation
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the methodverb parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4534?
CVE-2015-4534 has a high severity due to its potential for remote code execution by authenticated users.
How do I fix CVE-2015-4534?
To fix CVE-2015-4534, upgrade EMC Documentum Content Server to the latest patched version as specified by the vendor.
Who is affected by CVE-2015-4534?
CVE-2015-4534 affects EMC Documentum Content Server versions prior to 6.7SP1 P32, 6.7SP2 P25, 7.0 P19, 7.1 P16, and 7.2 P02.
What types of attacks can CVE-2015-4534 enable?
CVE-2015-4534 can enable authenticated users to execute arbitrary code on the server.
Is CVE-2015-4534 a local or remote vulnerability?
CVE-2015-4534 is a remote vulnerability that requires authenticated access to exploit.