PT-2023-23499 · Opentext · Opentext Documentum Content Server

Picar0Jsu · Published 2023-05-18 · Updated 2025-01-22 · CVE-2023-31871

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Documentum Content Server versions prior to 23.2

Description The issue allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root-owned SUID binary dm secure writer. This binary has security controls in place to prevent the creation of a file in a non-owned directory or as the root user. However, these controls can be bypassed to allow for an arbitrary file write as root.

Recommendations For versions prior to 23.2, update to version 23.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the dm secure writer binary to minimize the risk of exploitation.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2023-31871

Affected Products

Opentext Documentum Content Server

References · 6

• 🔥 https://gist.github.com/picar0jsu/a8e623639da34f36202ce5e436668de7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31871 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31871 · Vendor Advisory
• https://t.me/cibsecurity/64411 · Telegram Post
• https://t.me/cvenotify/50750 · Telegram Post
• https://t.me/cvenotify/108212 · Telegram Post