{"id":"CVE-2014-4626","published":"2014-12-17T01:00:00Z","modified":"2024-08-06T11:20:26Z","title":"EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote…","vendor":null,"product":null,"tier":"tail","description":{"text":"EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.03994,"percentile":0.90478,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.kb.cert.org/vuls/id/315340","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.kb.cert.org/vuls/id/386056","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.kb.cert.org/vuls/id/874632","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing","tags":["x_refsource_MISC"]}],"priority":{"score":18.1,"factors":[{"name":"EPSS percentile","points":18.1}]},"euvd":{"id":"EUVD-2014-4552","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2014-2515-family-cve-2014-2515","parents":[{"from":"CVE-2014-2515","to":"CVE-2014-4626","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.","from":"CVE.org","in":"CVE-2014-4626"}]}],"children":[{"from":"CVE-2014-4626","to":"CVE-2015-4544","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4626.","from":"CVE.org","in":"CVE-2015-4544"}]}]}}