Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2015-4532 | First vendor Publication | 2015-08-20 |
| Vendor | Cve | Last vendor Modification | 2016-11-28 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4532 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 5 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2015-10-01 | EMC Documentum Content Server privilege escalation attempt RuleID : 35850 - Revision : 2 - Type : SERVER-OTHER |
| 2015-10-01 | EMC Documentum Content Server remote access attempt RuleID : 35849 - Revision : 2 - Type : POLICY-OTHER |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-08-19 | Name : The remote host is affected by multiple vulnerabilities. File : emc_documentum_content_server_ESA-2015-131.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|---|
| BID | http://www.securityfocus.com/bid/76414 |
| BUGTRAQ | http://seclists.org/bugtraq/2015/Aug/86 |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:40:24 |
|
| 2021-04-22 01:49:20 |
|
| 2020-05-23 00:45:38 |
|
| 2016-11-29 00:25:16 |
|
| 2015-10-01 21:19:12 |
|
| 2015-08-21 13:20:23 |
|
| 2015-08-21 05:24:56 |
|
| 2015-08-20 17:24:20 |
|
