high8.8
CVE-2022-45923
An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).
Impact
An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) program cs.exe allows an attacker to increase/decrease an arbitrary memory address by 1 and trigger a call to a method of a vftable with a vftable pointer value chosen by the attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opentext | Opentext Extended Ecm | from 20.4 through 22.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/170613/OpenText-Extended-ECM-22.3-cs.exe-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2023/Jan/10
- https://sec-consult.com/vulnerability-lab/advisory/pre-authenticated-remote-code-execution-in-csexe-opentext-server-component/
- http://packetstormsecurity.com/files/170613/OpenText-Extended-ECM-22.3-cs.exe-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2023/Jan/10
- https://sec-consult.com/vulnerability-lab/advisory/pre-authenticated-remote-code-execution-in-csexe-opentext-server-component/