CVE-2024-4692 | THREATINT

Assigner	OpenText
Reserved	2024-05-09
Published	2024-10-16
Updated	2024-10-16

Description

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names. This issue affects OpenText Application Automation Tools: 24.1.0 and below.

LOW: 1.8

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear

Product status

Default status

unaffected

24.1.0 and below

affected

References

https://portal.microfocus.com/s/article/KM000033546?language=en_US

cve.org CVE-2024-4692

nvd.nist.gov CVE-2024-4692

Download JSON

https://cve.threatint.com/CVE/CVE-2024-4692

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.