CVEvulnerability
CVE-2015-0518
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.
Affected configurations
• emc documentum d2 3.1
• emc documentum d2 4.0
• emc documentum d2 4.1
• emc documentum d2 4.2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html Broken Link
- http://www.securityfocus.com/bid/72502 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031693 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100875 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html Broken Link
- http://www.securityfocus.com/bid/72502 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031693 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100875 exchange.xforce.ibmcloud.com