Lucene search

K
nvd[email protected]NVD:CVE-2024-4556
HistoryAug 28, 2024 - 7:15 a.m.

CVE-2024-4556

2024-08-2807:15:10
CWE-22
web.nvd.nist.gov
7
improper limitation
path traversal
opentext netiq access manager
vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

39.2%

Improper Limitation of a Pathname to a Restricted Directory (β€˜Path Traversal’) vulnerability in OpenText NetIQ Access Manager allows access the sensitive information.Β This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

Affected configurations

Nvd
Node
microfocusnetiq_access_managerRange<5.0.4
VendorProductVersionCPE
microfocusnetiq_access_manager*cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

39.2%

Related for NVD:CVE-2024-4556