CVE-2014-0629

Published: Mar 6, 2014Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by leveraging an incorrect group-addition implementation.

Affected (2)

Products: Emc: Documentum Taskspace

Emc

1 product

Documentum Taskspace

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Emc Documentum Taskspace	Version 6.7 sp1
Emc Documentum Taskspace	Version 6.7 sp2

Related CWEs

CWE-264

References (2)

http://seclists.org/bugtraq/2014/Mar/33

Source: security_alert@emc.com

http://seclists.org/bugtraq/2014/Mar/33

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.