CVE-2017-15276

CVE-2017-15276 is a path traversal vulnerability in OpenText Documentum Content Server versions through 7.3. An authenticated user can exploit this design flaw by uploading malicious TAR archives containing symlinks, which the server fails to properly validate during unpacking. This allows an attacker to write to sensitive files on the server, leading to privilege escalation and potentially full compromise. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in high impact to confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.