Products
OpenText iManager
- 3.2.6.0200
Source
security@opentext.com
Tags
CVE-2024-3488 details
Published : May 15, 2024, 5:15 p.m.
Last Modified : May 15, 2024, 6:35 p.m.
Last Modified : May 15, 2024, 6:35 p.m.
Description
File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.
CVSS Score
| 1 | 2 | 3 | 4 | 5.6 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
5.6
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H
References
| URL | Source |
|---|---|
| https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html | security@opentext.com |
This website uses the NVD API, but is not approved or certified by it.