CVE-2014-2507 EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in arg...
HighCVSS 8.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to unspecified methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum content server | <= 6.7 | No fix listed |
| emc documentum content server | = 6.0 | No fix listed |
| emc documentum content server | = 6.5 | No fix listed |
| emc documentum content server | = 6.5-sp1 | No fix listed |
| emc documentum content server | = 6.5-sp2 | No fix listed |
| emc documentum content server | = 6.5-sp3 | No fix listed |
| emc documentum content server | = 6.6 | No fix listed |
| emc documentum content server | = 6.7 | No fix listed |
| emc documentum content server | = 6.7-sp2 | No fix listed |
| emc documentum content server | = 7.0 | No fix listed |
| emc documentum content server | = 7.1 | No fix listed |
References
- 20140605 ESA-2014-046: EMC Documentum Content Server Multiple Vulnerabilities mailing-list
- packetstormsecurity.com
- 58954 third-party-advisory
- 20140630 ESA-2014-046: EMC Documentum Content Server Multiple Vulnerabilities mailing-list
- 67916 vdb-entry
- 1030339 vdb-entry