CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: emc documentum content server before 6.7 sp1 p29, 6.7 sp2 before p18, 7.0 before p16, and 7.1 before p09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_userrename or (3) dm_grouprename service task, aka esa-2014-105.  note: this vulnerability exists because of an incomplete fix for cve-2014-2515.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-17
Last Modified Date: 2014-12-17
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: emc documentum content server before 6.7 sp1 p29, 6.7 sp2 before p18, 7.0 before p16, and 7.1 before p09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_userrename or (3) dm_grouprename service task, aka esa-2014-105.  note: this vulnerability exists because of an incomplete fix for cve-2014-2515.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-12-17
Last Modified Date: 2014-12-17
assistant