Lucene search
OpenTextCVELIST:CVE-2024-4555HistoryAug 28, 2024 - 6:27 a.m.
CVE-2024-4555 User impersonation with MFA when configure in specific way
2024-08-2806:27:21
CWE-269
OpenText
www.cve.org
6
cve-2024-4555
user impersonation
mfa
opentext netiq access manager
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS
0.001
Percentile
18.6%
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "NetIQ Access Manager",
"vendor": "OpenText",
"versions": [
{
"lessThan": "<",
"status": "affected",
"version": "5.0.4.1",
"versionType": "server"
},
{
"lessThan": "<",
"status": "affected",
"version": "5.1",
"versionType": "server"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-4555 User impersonation with MFA when configure in specific way
2024-08-28 06:27:21
nvd
nvd
CVE-2024-4555
2024-08-28 07:15:09
cve
cve
CVE-2024-4555
2024-08-28 07:15:09
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS
0.001
Percentile
18.6%
Related for CVELIST:CVE-2024-4555