← Back

CVE-2015-0518

nvd nist
Published: Feb 14, 2015Modified: May 6, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.

Affected (5)

Products: Emc: Documentum D2
Emc
1 product
Documentum D2
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Documentum D2
Version 3.1
Documentum D2
Version 3.1 sp1
Documentum D2
Version 4.0
Documentum D2
Version 4.1
Documentum D2
Version 4.2

Related CWEs

CWE-264
CWE-264

References (8)

Source: security_alert@emc.com
Broken Link
Source: security_alert@emc.com
Third Party AdvisoryVDB Entry
Source: security_alert@emc.com
Third Party AdvisoryVDB Entry
Source: security_alert@emc.com
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.