CVE-2024-12862CWE-863

REST API allows users without permissions to remove external collaborators

Medium · published April 21, 2025

CVSS v4.0
5.5
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

The record
Technical detail
CVSS v4.0
5.5 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-04-21T14:22Z
EPSS history
Timeline
  • 21 APR 14:22Z
    REST API allows users without permissions to remove external collaborators
    cvelistv5