9.8
Critical
CVE-2024-1148 Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files
Description
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pvcs_version_manager 8.6 | earliest → < 8.6.3.3 | 8.6.3.3 |
| PVCS Version Manager 8.6 | earliest → < 8.6.3.3 | 8.6.3.3 |