PT-2015-4683 · Emc · Emc Documentum D2

Publicado 2015-02-14 · Atualizado 2017-09-08 · CVE-2015-0518

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 3.1 through SP1 EMC Documentum D2 versions 4.0 EMC Documentum D2 versions 4.1 before 4.1 P22 EMC Documentum D2 versions 4.2 before P11

Description The issue allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.

Recommendations For versions 3.1 through SP1, update to a version after SP1 to resolve the issue. For version 4.0, update to version 4.1 or later to resolve the issue. For versions 4.1 before 4.1 P22, update to version 4.1 P22 or later to resolve the issue. For versions 4.2 before P11, update to version 4.2 P11 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-0518

Produtos afetados

Emc Documentum D2

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/100875 · Nota
• http://securityfocus.com/bid/72502 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0518 · Nota de Segurança
• http://securitytracker.com/id/1031693 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html · Nota