CVE-2017-15012

    Dashboard / Vulnerabilities / CVE-2017-15012

    CVE-2017-15012

    Published: 13 Oct 2017Last Modified: 10 Mar 2026

    Summary:

    Details: OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.

    References: http://www.securityfocus.com/bid/101639, https://www.exploit-db.com/exploits/43003/, , http://seclists.org/bugtraq/2017/Oct/19

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High