CVE-2017-5586 in OpenText Documentum D2

Riassunto

di MITRE

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 25/01/2017
• Divulgazione: 22/02/2017
• Moderazione: accettato
• Voce: VDB-97162
• CPE: pronto
• CWE: CWE-20 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.22548
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-5586
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-5586
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-5586/