CVE-2015-0518

CVE-2015-0518 describes a critical privilege escalation vulnerability in the Properties service of the D2FS web-service component within EMC Documentum D2 versions 3.1 through SP1, 4.0, and 4.1 before P22, and 4.2 before P11. An authenticated attacker can exploit this flaw by making an unspecified method call to modify group permissions, thereby gaining superuser privileges. This vulnerability carries a CVSS score of 9.0, indicating a severe risk with network accessibility, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit code, Metasploit modules, or Nuclei templates are available, and there is no evidence of active exploitation or significant community discussion, the high severity warrants immediate patching for affected systems.