CVE-2024-1973: Privilege Escalation in Secure Content Manager

The primary impact of CVE-2024-1973 is the potential for unauthorized privilege escalation. A lower-privileged user, by exploiting this vulnerability, can effectively gain the permissions of a higher-privileged user within the Content Manager environment. This could lead to data breaches, system compromise, and disruption of services. The attacker could potentially access sensitive data, modify configurations, or even gain complete control over the affected system. The blast radius extends to any data or functionality accessible by the elevated user account.

1. Reserved2024-02-28
2. Published2024-03-25
3. Modified2024-08-06
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-1973 is to upgrade Secure Content Manager to a version <=23.4. If an immediate upgrade is not feasible, consider implementing stricter access controls and monitoring user activity for suspicious behavior. Review existing user permissions and ensure they adhere to the principle of least privilege. While a WAF or proxy cannot directly address this privilege escalation, they can help detect and block malicious requests associated with exploitation attempts. After upgrading, verify the fix by attempting to perform actions with a low-privileged user account and confirming that unauthorized operations are denied.