CVE Feed

    Dashboard / CVE / CVE-2014-4626

    CVE-2014-4626

    EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.

    Published:Dec 17, 2014
    Last Modified:Apr 12, 2025
    EPS:Dec 17, 2014
    EPSS Score:0.01785
    CVSS Score:9

    Affected Products

    Vendor
    Emc
    Product
    Documentum Content Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2015-4544 (CVSS 9) — EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for…
    CVE-2015-4535 (CVSS 7.5) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4534 (CVSS 9) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4536 (CVSS 3.5) — EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configur…
    CVE-2015-4533 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2015-4532 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2015-4531 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2014-4629 (CVSS 9) — EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated user…
    CVE-2014-4622 (CVSS 7.1) — EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check …
    CVE-2014-4621 (CVSS 8.5) — EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High