Critical Vulnerabilities Patched in OpenText Enterprise Content Management System

guest · Jan 20, 2023

By Eduard Kovacs @EduardKovacs - January 20, 2023

Several vulnerabilities described as having critical and high impact, including ones allowing unauthenticated remote code execution, have been found and patched in OpenText’s enterprise content management (ECM) product.
Click to expand...

The vulnerabilities were discovered by a researcher at cybersecurity consultancy Sec Consult in OpenText’s Extended ECM, which is designed for managing the distribution and use of information across an organization. Specifically, the flaws impact the product’s Content Server component.

The security firm this week published three different advisories describing its findings.
Click to expand...

One of the critical vulnerabilities, tracked as CVE-2022-45923, can allow an unauthenticated attacker to execute arbitrary code using specially crafted requests.
The second critical flaw, CVE-2022-45927, impacts the Java Frontend of the OpenText Content Server component and can allow an attacker to bypass authentication. Exploitation could ultimately lead to remote code execution.

Sec Consult has also identified five types of vulnerabilities in the Content Server component that can be exploited by authenticated attackers.
Click to expand...

Log in or Sign up

Critical Vulnerabilities Patched in OpenText Enterprise Content Management System

guest Guest

Log in or Sign up

Critical Vulnerabilities Patched in OpenText Enterprise Content Management System

guest Guest

Useful Searches