Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-1148 EUVD-2024-16917GHSA-37fc-9fm9-7mh2

Weak Access Control - Arbitrary file upload

Published Mar 21, 2024 · Updated Nov 11, 2024 · Assigned by OpenText

Description

Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files.

Affected products

VendorProductAffectedFixed
OpenText PVCS Version Manager < 8.6.3.3 8.6.3.3

References