title: Elevation of privileges vulnerability
description: By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to elevate privileges and perform unauthorized operations.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
platforms: Windows
product: Secure Content Manager
vendor: OpenText
versions:
lessThan: <=23.4, status: affected, version: 10.0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Apply the following patch builds in your data center.
Secure Content Manager 23.4 Patch 1: PH_215013 -  Content Manager 23.4 Patch 1 Build 111 https://kmviewer.saas.microfocus.com/#/1566945
Secure Content Manager 23.3 Patch 1: PH_215044 -  Content Manager 23.3 Patch 1 Build 434 https://kmviewer.saas.microfocus.com/#/1567049
Secure Content Manager 10.1 Patch 5: PH_215040 - Content Manager 10.1 Patch 5 Release Build 1054
Secure Content Manager 10.0 Patch 6: PH_215038 - Content Manager 10.0 Patch 6 Build 1402