Documentum Content Server vulnerabilities

2 known vulnerabilities in Documentum Content Server from OpenText. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Documentum™ Server: Unprotected Transport of Credentials

  CVE-2024-4188Jul 30, 2024OpenText

  Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from 16.7 through 23.4.

• 7.8 High severity

  Documentum Content Server: Incorrect Permission Assignment for Critical Resource

  CVE-2023-31871May 18, 2023OpenText

  OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dm_secure_writer. The binary has security controls in pla