Published: 13/10/2017 Updated: 03/11/2017

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 655

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

OpenText Documentum Content Server (formerly EMC Documentum Content Server) up to and including 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
opentext documentum content server

#!/usr/bin/env python # Opentext Documentum Content Server (formerly known as EMC Documentum Content Server) # contains following design gap, which allows authenticated user to gain privileges # of superuser: # # Content Server allows to upload content using batches (TAR archives), when unpacking # TAR archives Content Server fails to verify conte ...

Opentext Documentum Content Server (formerly known as EMC Documentum Content Server) allows for privilege escalation via traversal attacks leveraged through uploaded tar files ...

CWE-22 http://seclists.org/bugtraq/2017/Oct/19 https://www.exploit-db.com/exploits/43002/http://www.securityfocus.com/bid/101639 https://nvd.nist.gov https://www.exploit-db.com/exploits/43002/

CVE-2017-15276

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect