CVE-2014-2515 | BDVDB-2026-63236 Detail

Description#

EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/69275
https://exchange.xforce.ibmcloud.com/vulnerabilities/95367
http://secunia.com/advisories/60565
http://www.securitytracker.com/id/1030740
http://www.securityfocus.com/archive/1/533161/30/0/threaded

Exploit#

No public exploit known

History#

Version 12014-08-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.