CVE-2017-14525 Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the sta...
MediumCVSS 6.1
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opentext documentum administrator | = 7.2.0180.0055 | No fix listed |
| opentext documentum webtop | = 6.8.0160.0073 | No fix listed |
References
- 20170925 OpenText Documentum Administrator and Webtop - Open Redirection issue-tracking mailing-list third-party-advisory
- knowledge.opentext.com permissions-required vendor-advisory