CVE-2017-5586

Critical

Published: 22/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

OpenText Documentum D2 version 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to upgrade to the latest version of OpenText Documentum D2 and monitor systems for unauthorized activities.

Original NVD description (English source)

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.