CVEvulnerability
CVE-2014-4629
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-12-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.
Affected configurations
• emc documentum content server 6.7
• emc documentum content server 7.0
• emc documentum content server 7.1
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html packetstormsecurity.com
- http://www.securityfocus.com/archive/1/534135/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/71422 www.securityfocus.com
- http://www.securitytracker.com/id/1031298 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html packetstormsecurity.com
- http://www.securityfocus.com/archive/1/534135/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/71422 www.securityfocus.com
- http://www.securitytracker.com/id/1031298 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99085 exchange.xforce.ibmcloud.com