CVE-2024-1973 HIGH

CVE-2024-1973: Elevation of privileges vulnerability

Vendor Opentext

Product Secure Content Manager

Weakness CWE-269

Published March 25, 2024

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

8.5/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to elevate privileges and perform unauthorized operations.

Key dates

02Disclosure timeline

March 25, 2024 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-1973 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

04Related CVE

CVE-2024-30007 Microsoft Brokering File System Elevation of Privilege Vulnerability CVE-2026-30888 Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint CVE-2021-23887 Privilege escalation in McAfee DLP Endpoint for Windows CVE-2014-9193 Innominate mGuard Improper Privilege Management CVE-2022-35243 Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243