CVE-2024-12862

REST API allows users without permissions to remove external collaborators

State: Published
Severity: 5.5 Medium
Published: Apr 21, 2025
Updated: Apr 21, 2025
Reserved: Dec 20, 2024

Description

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

Scores

CVSS	Score	Vector	Source
4.0	5.5 Medium	CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H	OpenText

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
Content ServerOpenText	20.2-24.4Affected

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.