Lucene search

K
cvelistOpenTextCVELIST:CVE-2024-4556
HistoryAug 28, 2024 - 6:27 a.m.

CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager

2024-08-2806:27:07
CWE-22
OpenText
www.cve.org
3
cve-2024-4556
directory traversal
netiq access manager
opentext
improper limitation
path traversal
vulnerability
sensitive information access
netiq access manager 5.0.4
netiq access manager 5.1

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.2%

Improper Limitation of a Pathname to a Restricted Directory (β€˜Path Traversal’) vulnerability in OpenText NetIQ Access Manager allows access the sensitive information.Β This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NetIQ Access Manager",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "< =",
        "status": "affected",
        "version": "5.0.4.1",
        "versionType": "server"
      },
      {
        "lessThan": "<",
        "status": "affected",
        "version": "5.1",
        "versionType": "server"
      }
    ]
  }
]

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.2%

Related for CVELIST:CVE-2024-4556