Lucene search

K
cveOpenTextCVE-2024-5201
HistoryMay 23, 2024 - 8:15 p.m.

CVE-2024-5201

2024-05-2320:15:09
CWE-287
OpenText
web.nvd.nist.gov
54
cve-2024-5201
opentext dimensions rm
privilege escalation
authenticated user
http request
nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Privilege Escalationย in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another userย via HTTP Request

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dimensions RM",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "12.11.1.3",
        "status": "affected",
        "version": "12.11.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11.2.6",
        "status": "affected",
        "version": "12.11.2",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2024-5201