Lucene search
HistoryMay 15, 2024 - 5:15 p.m.
CVE-2024-3970
vulnerability
server side request forgery
opentext imanager
information disclosure
directory traversal
nvd
cve-2024-3970
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This
could lead to senstive information disclosure by directory traversal.
CNA Affected
[
{
"defaultStatus": "affected",
"platforms": [
"Windows",
"Linux"
],
"product": "iManager",
"vendor": "OpenText",
"versions": [
{
"lessThanOrEqual": "3.2.6.0300",
"status": "affected",
"version": "3.0.0",
"versionType": "rpm, exe"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager
2024-05-15 16:39:21
nvd
nvd
CVE-2024-3970
2024-05-15 17:15:15
cvelist
cvelist
CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager
2024-05-15 16:39:21
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
Related for CVE-2024-3970