Lucene search

OpenTextVULNRICHMENT:CVE-2024-3487

HistoryMay 15, 2024 - 4:47 p.m.

CVE-2024-3487 Broken Authentication vulnerability in iManager

2024-05-1516:47:07

CWE-287

OpenText

github.com

cve-2024-3487

opentext

imanager

authentication

vulnerability

manipulation

parameters

bypass

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This
vulnerability allows an attacker to manipulate certain parameters to bypass
authentication.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:microfocus:imanager:3.0:-:*:*:*:*:*:*"
    ],
    "vendor": "microfocus",
    "product": "imanager",
    "versions": [
      {
        "status": "affected",
        "version": "3.0",
        "versionType": "custom",
        "lessThanOrEqual": "3.2.6.0300"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-3487