Lucene search
PRIOn knowledge basePRION:CVE-2022-45922HistoryJan 18, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-01-1821:15:00
PRIOn knowledge base
www.prio-n.com
5
opentext content suite
logic flaw
adminpwd cookie
security issue
An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSession sets a valid AdminPwd cookie even when the Web Admin password was not entered. This allows access to endpoints, which require a valid AdminPwd cookie, without knowing the password.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opentext_extended_ecm | ge | 21.1 | |
| opentext_extended_ecm | le | 22.1 |
Related
cve
cve
CVE-2022-45922
2023-01-18 21:15:10
nvd
nvd
CVE-2022-45922
2023-01-18 21:15:10
cvelist
cvelist
CVE-2022-45922
2023-01-18 00:00:00
packetstorm
packetstorm
OpenText Extended ECM 22.3 File Deletion / LFI / Privilege Escsalation
2023-01-20 00:00:00
zdt
zdt