CVE-2017-14524: Medium severity OpenText Documentum Administrator vulnerability
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14524?
CVE-2017-14524 has a medium severity rating due to its potential for phishing attacks via open redirect vulnerabilities.
How do I fix CVE-2017-14524?
To mitigate CVE-2017-14524, upgrade OpenText Documentum Administrator to version 7.2.0180.0056 or later.
What kind of attacks can CVE-2017-14524 enable?
CVE-2017-14524 can enable remote attackers to conduct phishing attacks by redirecting users to arbitrary websites.
Which versions of OpenText Documentum are affected by CVE-2017-14524?
CVE-2017-14524 affects OpenText Documentum Administrator version 7.2.0180.0055 and Documentum Webtop version 6.8.0160.0073.
Is CVE-2017-14524 a critical vulnerability?
CVE-2017-14524 is not classified as critical but poses significant risks related to user security and trust due to its open redirect capability.