CVE-2024-12543— A user enumeration and subsequent data integrity vulnerability affecting barcode functionality
Possible ATT&CK Techniques 2AI
T1530 · Data from Cloud Storage T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-12543
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
A user enumeration and subsequent data integrity vulnerability affecting barcode functionality
Source: CVE Program / CVE List V5
Vulnerability Description
User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
行为工作流的不恰当实施
Source: CVE Program / CVE List V5
Vulnerability Title
OpenText Content Management 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenText Content Management是加拿大OpenText公司的一个企业内容管理软件。 OpenText Content Management 24.3版本至25.1版本存在安全漏洞，该漏洞源于条形码功能存在用户枚举和数据完整性问题，可能导致恶意认证攻击者修改条形码属性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| OpenText | OpenText Content Management | 24.3-25.1 | - |
II. Public POCs for CVE-2024-12543
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-12543
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-12543 (1)
Same Patch Batch · OpenText · 2025-04-21 · 4 CVEs total
| CVE-2024-12862 | REST API allows users without permissions to remove external collaborators | |
| CVE-2025-2517 | Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manage | |
| CVE-2024-12863 | Stored XSS in Discussions functionality |
IV. Related Vulnerabilities
Same vendor: OpenText
- CVE-2026-11877
Missing Authorization Vulnerability in OpenText Access Manag - CVE-2026-11878
Reflected Cross-Site Scripting vulnerability in OpenText Acc - CVE-2026-2123
Privilege escalation vulnerability in Operations Agent - CVE-2024-11604
Insertion of Sensitive Information into Log File - CVE-2025-13478
Cache Misconfiguration Leading to Cross-User Data Exposure
Same weakness: CWE-841
- CVE-2025-36333
Vulnerabilities found in Watson Data Intelligence - CVE-2026-57536
Insufficient validation of payment status in pretix-mollie - CVE-2026-13222
Insufficient validation of payment status in pretix-oppwa - CVE-2026-13223
Insufficient validation of payment status in pretix-computop - CVE-2026-46540
Nimiq light-blockchain: Light blockchain rebranch issue
V. Comments for CVE-2024-12543
No comments yet