Auth bypass in Opentext Content Server
CVE-2024-12862
Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.
Vulnerability class: Broken Access Control
EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.
Affected products
- Opentext Content Server — versions 20.2-24.4