CVE-2024-4692 | THREATINT

Description

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names. This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Reserved 2024-05-09 | Published 2024-10-16 | Updated 2024-10-16 | Assigner OpenText

LOW: 1.8CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges

Product status

Default status

unaffected

24.1.0 and below

affected

References

portal.microfocus.com/s/article/KM000033546?language=en_US

cve.org (CVE-2024-4692)

nvd.nist.gov (CVE-2024-4692)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.