CVE-2014-4626

EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515.

• CWE-264

• http://www.kb.cert.org/vuls/id/315340Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/386056Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/874632Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing
• http://www.kb.cert.org/vuls/id/315340Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/386056Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/874632Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing

Published

Dec 17, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4619EMC RSA Identity Management and Governance (IMG) 6.5.x befor…
• CVE-2014-4620The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build…
• CVE-2014-4621EMC Documentum Content Server before 6.7 SP2 P17, 7.0 throug…
• CVE-2014-4622EMC Documentum Content Server before 6.7 SP2 P17, 7.0 throug…
• CVE-2014-4623EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS…
• CVE-2014-4624EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE)…
• CVE-2014-4627SQL injection vulnerability in EMC RSA Web Threat Detection …8.8
• CVE-2014-4628Cross-site scripting (XSS) vulnerability in EMC Isilon Insig…
• CVE-2014-4629EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6…
• CVE-2014-4630EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 a…
• CVE-2014-4631RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1…
• CVE-2014-4632VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, …