CVEvulnerability
CVE-2014-2507
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to unspecified methods.
Affected configurations
• emc documentum content server (<= 6.7)
• emc documentum content server 6.0
• emc documentum content server 6.5
• emc documentum content server 6.6
• emc documentum content server 6.7
• emc documentum content server 7.0
• emc documentum content server 7.1
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html archives.neohapsis.com
- http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html packetstormsecurity.com
- http://secunia.com/advisories/58954 secunia.com
- http://www.securityfocus.com/archive/1/532596/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67916 www.securityfocus.com
- http://www.securitytracker.com/id/1030339 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html archives.neohapsis.com
- http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html packetstormsecurity.com
- http://secunia.com/advisories/58954 secunia.com
- http://www.securityfocus.com/archive/1/532596/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67916 www.securityfocus.com
- http://www.securitytracker.com/id/1030339 www.securitytracker.com