CVE-2015-0518

Опубликовано: 14 фев. 2015

Источник: nvd

CVSS2: 9

EPSS Низкий

Описание

The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
Broken Link
http://www.securityfocus.com/bid/72502
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031693
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100875
http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
Broken Link
http://www.securityfocus.com/bid/72502
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031693
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100875

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:documentum_d2:3.1:-:*:*:*:*:*:*

cpe:2.3:a:emc:documentum_d2:3.1:sp1:*:*:*:*:*:*

cpe:2.3:a:emc:documentum_d2:4.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:documentum_d2:4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01159

Низкий

9 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-jpc2-rmf9-xc9r

github

больше 3 лет назад