Lucene search
OpenTextCVE-2024-4556HistoryAug 28, 2024 - 7:15 a.m.
CVE-2024-4556
2024-08-2807:15:10
CWE-22
OpenText
web.nvd.nist.gov
29
vulnerability
path traversal
opentext netiq access manager
sensitive information
security issue
cve-2024-4556
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.2%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.
Affected configurations
Node
microfocusnetiq_access_managerRange<5.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microfocus | netiq_access_manager | * | cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "NetIQ Access Manager",
"vendor": "OpenText",
"versions": [
{
"lessThan": "< =",
"status": "affected",
"version": "5.0.4.1",
"versionType": "server"
},
{
"lessThan": "<",
"status": "affected",
"version": "5.1",
"versionType": "server"
}
]
}
]Related
cvelist
cvelist
CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager
2024-08-28 06:27:07
nvd
nvd
CVE-2024-4556
2024-08-28 07:15:10
vulnrichment
vulnrichment
CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager
2024-08-28 06:27:07
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.2%
Related for CVE-2024-4556