THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-3967

Remote Code Execution vulnerability in the iManager

Reserved:2024-04-18
Published:2024-05-15
Updated:2024-05-15

Description

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.



HIGH: 7.6CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Problem types

CWE-502 Deserialization of Untrusted Data

Product status

Default status
affected

3.0.0
affected

Credits

Blaine Herro (Yahoo! Inc. VRT) finder

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

cve.org CVE-2024-3967

nvd.nist.gov CVE-2024-3967

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-3967