PT-2023-23499 · Opentext · Opentext Documentum Content Server

Picar0Jsu · Publicado 2023-05-18 · Atualizado 2025-01-22 · CVE-2023-31871

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions prior to 23.2

Description The issue allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root-owned SUID binary dm secure writer. This binary has security controls in place to prevent the creation of a file in a non-owned directory or as the root user. However, these controls can be bypassed to allow for an arbitrary file write as root.

Recommendations For versions prior to 23.2, update to version 23.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the dm secure writer binary to minimize the risk of exploitation.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2023-31871

Produtos afetados

Opentext Documentum Content Server

Referências · 6

• 🔥 https://gist.github.com/picar0jsu/a8e623639da34f36202ce5e436668de7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31871 · Nota de Segurança
• https://t.me/cibsecurity/64411 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-31871 · Aviso do Fabricante
• https://t.me/cvenotify/50750 · Publicação no Telegram
• https://t.me/cvenotify/108212 · Publicação no Telegram