Lucene search
HistoryMay 15, 2024 - 5:15 p.m.
CVE-2024-3488
cve-2024-3488
file upload
opentext imanager
unauthenticated
session
vulnerability
upload
authentication
CVSS3
5.6
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
File Upload vulnerability in unauthenticated
session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a
file without authentication.
CVSS3
5.6
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-3488