CVE-2014-2508

Description

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on database actions via vectors involving DQL hints.

References

http://www.securitytracker.com/id/1030339

http://www.securityfocus.com/bid/67918

http://www.securityfocus.com/archive/1/532596/100/0/threaded

http://secunia.com/advisories/58954

http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html

http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3