PT-2014-4745 · Emc · Emc Documentum Content Server

Publicado 2014-06-08 · Atualizado 2018-10-09 · CVE-2014-2507

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP1 P28 EMC Documentum Content Server versions 6.7 SP2 prior to P14 EMC Documentum Content Server versions 7.0 prior to P15 EMC Documentum Content Server versions 7.1 prior to P05

Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to unspecified methods.

Recommendations For versions prior to 6.7 SP1 P28, update to 6.7 SP1 P28 or later. For versions 6.7 SP2 prior to P14, update to 6.7 SP2 P14 or later. For versions 7.0 prior to P15, update to 7.0 P15 or later. For versions 7.1 prior to P05, update to 7.1 P05 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-2507

Produtos afetados

Emc Documentum Content Server

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-2507 · Nota de Segurança
• http://securityfocus.com/bid/67916 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html · Nota
• http://secunia.com/advisories/58954 · Nota
• http://securityfocus.com/archive/1/532596/100/0/threaded · Nota
• http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html · Nota
• http://securitytracker.com/id/1030339 · Nota