CVE-2017-15276: opentext documentum_content_server Path Traversal

Vulnerability summary

CVE-2017-15276 is a high (CVSS 8.8) Path Traversal vulnerability in opentext documentum_content_server. EPSS estimates a 9.49% chance of exploitation in the next 30 days, higher than 95.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 13-10-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.