Lucene search

OpenTextCVE-2024-5202

HistoryMay 23, 2024 - 8:15 p.m.

CVE-2024-5202

2024-05-2320:15:09

CWE-200

OpenText

web.nvd.nist.gov

opentext dimensions rm

arbitrary file read

cve-2024-5202

authenticated users

web services

server

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dimensions RM",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "12.11.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11.2.6",
        "status": "affected",
        "version": "12.11.2",
        "versionType": "custom"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000029988

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-5202