CVE-2015-4533
Last modified
CVE-2015-4533 is a vulnerability of currently unknown severity. EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.. EPSS estimates a 3.89% chance of exploitation in the next 30 days.
Description
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Emc | Documentum Content Server | 6.7 | Sp1 |
| Emc | Documentum Content Server | 7.0 | — |
| Emc | Documentum Content Server | 7.1 | — |
| Emc | Documentum Content Server | 7.2 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-4533?
How severe is CVE-2015-4533?
How do I fix CVE-2015-4533?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-4527Directory traversal vulnerability in EMC Avamar Server 7.x b…
- CVE-2015-4528Cross-site scripting (XSS) vulnerability in EMC Documentum C…
- CVE-2015-4529Open redirect vulnerability in EMC Documentum WebTop before …
- CVE-2015-4530Cross-site request forgery (CSRF) vulnerability in EMC Docum…
- CVE-2015-4531EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 befo…
- CVE-2015-4532EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 befo…
- CVE-2015-4534Java Method Server (JMS) in EMC Documentum Content Server be…
- CVE-2015-4535Java Method Server (JMS) in EMC Documentum Content Server be…
- CVE-2015-4536EMC Documentum Content Server before 7.0 P20, 7.1 before P18…
- CVE-2015-4537Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded pas…
- CVE-2015-4538The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x befor…
- CVE-2015-4539Multiple cross-site scripting (XSS) vulnerabilities in EMC R…
Are you affected by CVE-2015-4533?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST