CVE-2017-15014: Improper Privilege Management

OpenText Documentum Content Server formerly EMC Documentum Content Server through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the...

CVE-2017-7221: Improper Neutralization of Special Elements used in an SQL Command

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...

OpenText Documentum Content Server SQL Injection

!/usr/bin/env python import socket import sys from os.path import basename from dctmpy.docbaseclient import DocbaseClient from dctmpy.obj.typedobject import TypedObject CIPHERS = "ALL:aNULL:!eNULL" def usage: print "usage:\n\t%s host port user password" % basenamesys.argv0 def main: if lensys.arg...

PT-2017-17586

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server affected versions not specified Description The issue is related to inadequate protection against SQL injection, allowing remote authenticated users to execute arbitrary code with super-user privileges. This...

Design/Logic Flaw

OpenText Documentum Content Server allows superuser access via sysobjsave or save of a crafted object, followed by an unauthorized "UPDATE dmdbo.dmusers SET userprivileges=16" command, aka an "RPC save-commands" attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-453...

PT-2017-17585

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server affected versions not specified Description The issue allows superuser access via sys obj save or save of a crafted object, followed by an unauthorized "UPDATE dm dbo.dm user s SET user privileges=16" command...

CVE-2017-7220: Improper Input Validation

OpenText Documentum Content Server allows superuser access via sysobjsave or save of a crafted object, followed by an unauthorized "UPDATE dmdbo.dmusers SET userprivileges=16" command, aka an "RPC save-commands" attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-453...

PT-2017-16592

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions 7.3 Description The issue allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request, due to the improper restriction of DQL...

CVE-2017-5585: Improper Neutralization of Special Elements in Output Used by a Downstream Component

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

OpenText Documentum Content Server 7.3 SQL Injection

CVE Identifier: CVE-2017-5585 Vendor: OpenText Affected products: OpenText Documentum Content Server 7.3 PostgreSQL builds only Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Fix: not available Description: Previously announced fix for...