CVE-2023-31871: opentext documentum_content_server

Vulnerability summary

CVE-2023-31871 is a high (CVSS 7.8) vulnerability in opentext documentum_content_server. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 18-05-2023
   PublishedVulnerability first disclosed.
2. 22-01-2025
   Last modifiedVulnerability information updated.

Description

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dm_secure_writer. The binary has security controls in place preventing creation of a file in a non-owned directory, or as the root user. However, these controls can be carefully bypassed to allow for an arbitrary file write as root.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.