← Back

CVE-2014-2515

nvd nist
Published: Aug 20, 2014Modified: May 6, 2026

JSON object

Loading...
8.5
Vector
AV:N/AC:M/Au:S/C:C/I:C/A:C
Exploitability: 6.8 / Impact: 10.0
Source: NVD

Description

EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.

Affected (5)

Products: Emc: Documentum D2
Emc
1 product
Documentum D2
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Documentum D2
Version 3.1
Documentum D2
Version 3.1 sp1
Documentum D2
Version 4.0
Documentum D2
Version 4.1
Documentum D2
Version 4.2

Related CWEs

CWE-264
CWE-264

References (10)

Source: security_alert@emc.com
Source: security_alert@emc.com
Source: security_alert@emc.com
Source: security_alert@emc.com
Source: security_alert@emc.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.