CVE Feed

    Dashboard / CVE / CVE-2015-4531

    CVE-2015-4531

    EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4622.

    Published:Aug 20, 2015
    Last Modified:Apr 12, 2025
    EPS:Aug 20, 2015
    EPSS Score:0.00224
    CVSS Score:9

    Affected Products

    Vendor
    Emc
    Product
    Documentum Content Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2015-4544 (CVSS 9) — EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for…
    CVE-2015-4535 (CVSS 7.5) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4534 (CVSS 9) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4536 (CVSS 3.5) — EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configur…
    CVE-2015-4533 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2015-4532 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2014-4626 (CVSS 9) — EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allow…
    CVE-2014-4629 (CVSS 9) — EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated user…
    CVE-2014-4622 (CVSS 7.1) — EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check …
    CVE-2014-4621 (CVSS 8.5) — EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High