PT-2017-2936 · Opentext · Opentext Documentum Administrator

Jakub Palaczynski + 1 · Published 2017-09-24 · Updated 2017-10-06 · CVE-2017-14526

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Documentum Administrator version 7.2.0180.0055

Description The issue is related to incorrect restriction of XML external entities (XXE) in the OpenText Documentum Administrator. This can be exploited by a remote attacker to read arbitrary files, cause a denial of service, or obtain user hashes on Windows systems. The exploitation involves crafted XML structures, such as a DTD, in requests to specific API endpoints like xda/com/documentum/ucf/server/transport/impl/GAIRConnector, or through the import or check-in of crafted XML files in a MediaProfile file.

Recommendations For OpenText Documentum Administrator version 7.2.0180.0055, consider disabling the import and check-in functionality for XML files in MediaProfile until a patch is available. Restrict access to the xda/com/documentum/ucf/server/transport/impl/GAIRConnector endpoint to minimize the risk of exploitation. Avoid using crafted DTDs or XML structures in requests to prevent potential attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2017-02261

CVE-2017-14526

Affected Products

Opentext Documentum Administrator

References · 6

• https://bdu.fstec.ru/vul/2017-02261 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14526 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14526 · Security Note
• https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774 · Vendor Advisory
• http://cxsecurity.com/issue/WLB-2017090218 · Note
• http://seclists.org/fulldisclosure/2017/Sep/58 · Note