CVE-2022-45927

High

Description

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used to bypass the authentication of the QDS endpoints of the Content Server. These endpoints can be used to create objects and execute arbitrary code.

SeverityHigh

CVSS8.8

Exploit probability—

ProductOpentext Extended Ecm

PublishedJan 18, 2023

First seenJan 18, 2023

Weakness typeCWE-639Authorization bypass through user-controlled key

How to fix

Update

opentext opentext_extended_ecm22.4 or later

Affected products

Product	Affected versions	Fixed in
opentext opentext_extended_ecm	20.4 ≤ v < 22.4	22.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.