CVE-2015-0518

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-14 · updated 2026-06-17
Weakness: CWE-264

Description

The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.

Affected products

EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6: 3.1, 3.1-sp1, 4.0, 4.1, 4.2

References

http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
http://www.securityfocus.com/bid/72502
http://www.securitytracker.com/id/1031693
https://exchange.xforce.ibmcloud.com/vulnerabilities/100875
http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
http://www.securityfocus.com/bid/72502
http://www.securitytracker.com/id/1031693
https://exchange.xforce.ibmcloud.com/vulnerabilities/100875

Get alerted when CVE-2015-0518 or the next vulnerability affects your stack