CVE-2017-15012

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.

• CWE-20

• http://seclists.org/bugtraq/2017/Oct/19Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101639
• https://www.exploit-db.com/exploits/43003/
• http://seclists.org/bugtraq/2017/Oct/19Mailing List, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101639
• https://www.exploit-db.com/exploits/43003/

Published

Oct 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1500A Reflected Cross Site Scripting (XSS) vulnerability exists …
• CVE-2017-15008PRTG Network Monitor version 17.3.33.2830 is vulnerable to s…
• CVE-2017-15009PRTG Network Monitor version 17.3.33.2830 is vulnerable to r…
• CVE-2017-1501IBM WebSphere Application Server 8.0, 8.5, and 9.0 could pro…
• CVE-2017-15010A ReDoS (regular expression denial of service) flaw was foun…
• CVE-2017-15011The named pipes in qtsingleapp in Qt 5.x, as used in qBittor…
• CVE-2017-15013OpenText Documentum Content Server (formerly EMC Documentum …
• CVE-2017-15014OpenText Documentum Content Server (formerly EMC Documentum …
• CVE-2017-15015ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15016ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15017ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulne…
• CVE-2017-15018LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3…5.5