Unrated severityNVD Advisory· Published Jan 18, 2023· Updated Apr 4, 2025

CVE-2022-45922

Description

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSession sets a valid AdminPwd cookie even when the Web Admin password was not entered. This allows access to endpoints, which require a valid AdminPwd cookie, without knowing the password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenText/Content Suite Platformdescription
Opentext/Content Suite Platformllm-create
Range: = 22.1 (16.2.19.1803)

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2023/Jan/14mitremailing-list
packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.htmlmitre
sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000