OpenText Content Management Cache Poisoning Vulnerability Allowing Unauthorized File Downloads

A cache poisoning vulnerability has been identified in OpenText Content Management (Extended ECM) versions 20.4 prior to 25.3. This vulnerability allows authenticated attackers to download unprotected files from the server, provided they know the exact filenames. The issue arises from a complex cache exploitation technique.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users can upgrade to OpenText Content Management CE 25.4 or later. Hotfixes for Content Management (Extended ECM) CE 23.4-25.3 are available through OpenText My Support. Customers using Content Management (Extended ECM) CE 20.4-23.3 should upgrade to at least CE 23.4 and apply the relevant hotfix. As an additional mitigation, customers can restrict the 'Download as Spreadsheet' operation privilege to trusted users only.