Beveiligingsadvies

CVE-2017-14526

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-09-27 17:00:00

Laatst bijgewerkt 2024-08-05 19:27:40

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a (1) crafted DTD, involving unspecified XML structures in a request to xda/com/documentum/ucf/server/transport/impl/GAIRConnector or crafted XML file in a MediaProfile file (2) import or (3) check in.

← Alle CVE's bekijken Bekijk op cve.org ↗