CVE-2014-0622
Severity Score
9.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6.7 SP2 before P08, 7.0 before P12, and 7.1 before P01 does not properly implement content uploading, which allows remote authenticated users to bypass intended content access restrictions via unspecified vectors.
El servicio Web en EMC Documentum Foundation Services (DFS) 6.5 hasta 6.7 anterior a 6.7 SP1 P22, 6.7 SP2 anterior a P08, 7.0 anterior a P12 y 7.1 anterior a P01 no implementa debidamente la subida de contenido, lo que permite a usuarios remotos autenticados evadir restricciones de acceso a contenido a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-01-02 CVE Reserved
- 2014-02-05 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-24 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2014-02/0007.html | Mailing List | |
| http://osvdb.org/102949 | Vdb Entry | |
| http://secunia.com/advisories/56845 | Third Party Advisory | |
| http://www.securityfocus.com/bid/65398 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90982 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Documentum Foundation Services Search vendor "Emc" for product "Documentum Foundation Services" | 6.5 Search vendor "Emc" for product "Documentum Foundation Services" and version "6.5" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Foundation Services Search vendor "Emc" for product "Documentum Foundation Services" | 6.6 Search vendor "Emc" for product "Documentum Foundation Services" and version "6.6" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Foundation Services Search vendor "Emc" for product "Documentum Foundation Services" | 6.7 Search vendor "Emc" for product "Documentum Foundation Services" and version "6.7" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Foundation Services Search vendor "Emc" for product "Documentum Foundation Services" | 7.0 Search vendor "Emc" for product "Documentum Foundation Services" and version "7.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Foundation Services Search vendor "Emc" for product "Documentum Foundation Services" | 7.1 Search vendor "Emc" for product "Documentum Foundation Services" and version "7.1" | - |
Affected
| ||||||