PT-2017-16592 · Opentext+1 · Opentext Documentum Content Server+1

Publicado 2017-02-22 · Atualizado 2017-03-02 · CVE-2017-5585

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions 7.3

Description The issue allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request, due to the improper restriction of DQL hints when the PostgreSQL Database is used and the return top results row based config option is false.

Recommendations For OpenText Documentum Content Server version 7.3, set the return top results row based config option to true to mitigate the risk of DQL injection attacks. Additionally, consider restricting access to the DQL functionality until a more comprehensive fix is available.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2017-5585

Produtos afetados

Opentext Documentum Content Server

Postgresql Database

Referências · 4

• 🔥 http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5585 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5585 · Aviso do Fabricante
• http://securityfocus.com/bid/96224 · Nota