CVE-2017-7220 is a critical vulnerability in OpenText Documentum Content Server that allows authenticated attackers to gain superuser access. This flaw, an incomplete fix for CVE-2015-4532, enables unauthorized privilege escalation through crafted object saves or the sys_obj_save function, followed by an UPDATE command to set user privileges to 16. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity, requiring only low privileges for a complete compromise of confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and there is no evidence of active exploitation or significant community discussion, the potential for severe impact warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:opentext:documentum_content_server:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.