Uncontrolled Search Path Element Vulnerability in OpenText Secure Content Manager for Windows

CVE-2024-12530

What is CVE-2024-12530?

An uncontrolled search path element vulnerability has been identified in OpenText Secure Content Manager specifically for Windows systems. This security flaw enables DLL side-loading, which could allow an attacker to execute malicious code within the application’s trusted environment. Utilizing this vulnerability, end-users might unwittingly load malicious libraries through the application, potentially leading to unauthorized actions and data exposure. It is crucial for users and administrators of the affected product version to assess their security configurations and implement necessary mitigation strategies.

References