PT-2018-18191 · Opentext · Opentext Documentum D2 Webtop

Vipin Chaudhary · Publicado 2018-04-11 · Atualizado 2018-05-16 · CVE-2018-7660

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenText Documentum D2 Webtop version 4.6.0030 build 059

Description A Reflected Cross-Site Scripting issue could potentially be exploited by malicious users to compromise the affected system. The issue is related to the servlet/Download, docbase or username parameter.

Recommendations For OpenText Documentum D2 Webtop version 4.6.0030 build 059, consider restricting access to the servlet/Download endpoint and avoid using the docbase or username parameter until a fix is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-7660

Produtos afetados

Opentext Documentum D2 Webtop

Referências · 3

• 🔥 https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-7660 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7660 · Nota de Segurança