CVE-2015-4544: Critical severity opentext documentum content server vulnerability
EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dmjob object access, which allows remote authenticated users to obtain superuser privileges via crafted object operations. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4626.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4544?
CVE-2015-4544 has a high severity due to its potential for privilege escalation by remote authenticated users.
How do I fix CVE-2015-4544?
To fix CVE-2015-4544, upgrade EMC Documentum Content Server to version 7.1P20 or 7.2P04 or later.
Who is affected by CVE-2015-4544?
CVE-2015-4544 affects users of EMC Documentum Content Server versions prior to 7.1P20 and 7.2P04.
What kind of attack is possible with CVE-2015-4544?
CVE-2015-4544 allows remote authenticated users to escalate their privileges to superuser through crafted object operations.
When was CVE-2015-4544 disclosed?
CVE-2015-4544 was disclosed in September 2015.