PT-2017-16592 · Opentext+1 · Opentext Documentum Content Server+1

Published 2017-02-22 · Updated 2017-03-02 · CVE-2017-5585

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions 7.3

Description The issue allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request, due to the improper restriction of DQL hints when the PostgreSQL Database is used and the return top results row based config option is false.

Recommendations For OpenText Documentum Content Server version 7.3, set the return top results row based config option to true to mitigate the risk of DQL injection attacks. Additionally, consider restricting access to the DQL functionality until a more comprehensive fix is available.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-5585

Affected Products

Opentext Documentum Content Server

Postgresql Database

References · 4

• 🔥 http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5585 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5585 · Vendor Advisory
• http://securityfocus.com/bid/96224 · Note