OpenText Secure Content Manager Uncontrolled Search Path Vulnerability Allowing DLL Side-Loading

A vulnerability allowing insecure dynamic-link library (DLL) loading has been identified in OpenText Secure Content Manager versions 23.4 and earlier on Windows. This uncontrolled search path element vulnerability can be exploited by end-users to execute malicious code within the trusted context of the thick-client application.

Impact

Exploitation of this vulnerability could lead to the execution of malicious code in the trusted context of the application.

Remediation

Users can apply one of the following patches, depending on their deployed version: Secure Content Manager 23.4 Patch 3, Secure Content Manager 23.4 Patch 1 HF 7, or Secure Content Manager 23.4 Patch 2 HF 1.