CVE-2024-1147

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and download of files.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
OpenTextPVCS Version Manager< 8.6.3.3
opentextpvcs_version_manager< 8.6.3.3

References

Timeline

Published
Mar 21, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-114777.87-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute aCVE-2024-114795.1A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could CVE-2024-11489.8Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files.CVE-2024-114818.2A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traverCVE-2024-114829.8A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through commaCVE-2024-114835.0A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveragiCVE-2024-114848.8A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0. Affected by this vulnerability is an unknowCVE-2024-114858.1A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affected by this issue is CVE-2024-114864.3A vulnerability, which was classified as problematic, was found in Code4Berry Decoration Management System 1.0. This affects an unknown partCVE-2024-114878.8A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknownCVE-2024-114886.1A vulnerability was found in 115cms up to 20240807 and classified as problematic. This issue affects some unknown processing of the file /apCVE-2024-114896.1A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown function of the file /inde
CVE-2024-1147: Critical severity, CVSS 9.8 | Vulnix