PT-2025-17020 · Opentext · Opentext Secure Content Manager

Kirwin Webb · Published 2025-04-17 · Updated 2025-04-18 · CVE-2024-12530

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenText Secure Content Manager version 23.4

Description The issue is related to an Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows, which allows DLL Side-Loading. This could potentially be exploited by end-users to execute malicious code in the trusted context of the thick-client application.

Recommendations For OpenText Secure Content Manager version 23.4, consider restricting access to the application until a patch is available, and avoid using any potentially vulnerable DLLs. As a temporary workaround, consider disabling any features that may be using the vulnerable search path element until a fix is provided.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-12530

Affected Products

Opentext Secure Content Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-12530 · Security Note
• https://portal.microfocus.com/s/article/KM000040073? · Note
• https://twitter.com/CVEnew/status/1913313004252512346 · Twitter Post