Lucene search
OpenTextCVELIST:CVE-2024-1148HistoryMar 21, 2024 - 7:34 a.m.
CVE-2024-1148 Weak Access Control - Arbitrary file upload
2024-03-2107:34:35
CWE-287
OpenText
www.cve.org
opentext pvcs
weak access control
arbitrary file upload
authentication bypass
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "PVCS Version Manager",
"vendor": "OpenText",
"versions": [
{
"lessThan": "8.6.3.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVELIST:CVE-2024-1148