Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Content_manager | Microfocus | 9.1.0-patch6_hotfix1 (including) | 9.1.0-patch6_hotfix1 (including) |
| Content_manager | Microfocus | 9.1.0-patch6_hotfix2 (including) | 9.1.0-patch6_hotfix2 (including) |
| Content_manager | Microfocus | 9.1.0-patch6_hotfix3 (including) | 9.1.0-patch6_hotfix3 (including) |
| Content_manager | Microfocus | 9.1.0-patch6_hotfix4 (including) | 9.1.0-patch6_hotfix4 (including) |
| Content_manager | Microfocus | 9.1.0-patch6_hotfix5 (including) | 9.1.0-patch6_hotfix5 (including) |
| Content_manager | Microfocus | 9.2.0-patch3_hotfix1 (including) | 9.2.0-patch3_hotfix1 (including) |
| Content_manager | Microfocus | 9.3.0-patch2_hotfix1 (including) | 9.3.0-patch2_hotfix1 (including) |
| Content_manager | Microfocus | 9.3.0-patch2_hotfix2 (including) | 9.3.0-patch2_hotfix2 (including) |