CVE-2015-4535: High severity opentext documentum content server vulnerability
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when debugtrace is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing a login ticket.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4535?
CVE-2015-4535 is classified as a critical vulnerability due to its potential to allow remote authenticated users to gain super-user privileges.
How do I fix CVE-2015-4535?
To fix CVE-2015-4535, upgrade EMC Documentum Content Server to the latest version that is not affected by this vulnerability.
Who is affected by CVE-2015-4535?
CVE-2015-4535 affects users of EMC Documentum Content Server versions 6.7SP1, 6.7SP2, 7.0, 7.1, and 7.2 when __debug_trace__ is enabled.
What impact does CVE-2015-4535 have?
The impact of CVE-2015-4535 is that it can lead to unauthorized elevation of privileges for remote authenticated users.
What configurations expose CVE-2015-4535?
CVE-2015-4535 is exposed when the __debug_trace__ feature is configured in EMC Documentum Content Server.