Lucene search

OpenTextVULNRICHMENT:CVE-2023-6123

HistoryFeb 15, 2024 - 9:04 p.m.

CVE-2023-6123 Improper Neutralization vulnerability affects OpenText ALM Octane.

2024-02-1521:04:29

OpenText

github.com

cve-2023-6123

opentext alm octane

code execution

vulnerability

remote code execution

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack.

CNA Affected

[
  {
    "vendor": "OpenText",
    "product": "ALM Octane.",
    "versions": [
      {
        "status": "affected",
        "version": "16.2.100",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:opentext:alm_octane:*:*:*:*:*:*:*:*"
    ],
    "vendor": "opentext",
    "product": "alm_octane",
    "versions": [
      {
        "status": "affected",
        "version": "16.2.100",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

portal.microfocus.com/s/article/KM000026128?language=en_US

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-6123