Back to search
CVE-2017-7221
Published: Apr 25, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://seclists.org/fulldisclosure/2017/Apr/97
x_refsource_MISC
41928
exploit
x_refsource_EXPLOIT-DB
98038
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now