CVE-2017-15013

OpenText Documentum Content Server formerly EMC Documentum Content Server through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores information about uploaded files in dmrcontent objects, which are queryable and "editable...

CVE-2017-15014

OpenText Documentum Content Server formerly EMC Documentum Content Server through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the...

PT-2017-13818

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions through 7.3 Description The issue allows an authenticated user to gain superuser privileges by exploiting a design gap in how Content Server stores and manages information about uploaded files in dmr...

PT-2017-13819

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server formerly EMC Documentum Content Server versions through 7.3 Description The issue allows authenticated users to download arbitrary content files, regardless of their repository permissions, due to a design ga...