CVE-2024-12862 — REST API allows users without permissions to remove external collaborators

CVE-2024-12862

REST API allows users without permissions to remove external collaborators PUBLISHED

Description (CNA)

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

Affected (CNA)

Vendor / product	Versions
OpenText / Content Server	affected 20.2-24.4

CWE

CWE-863

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.