Possible External Service Interaction Attack in eDirectory
CVE-2021-38132

9.8CRITICAL

Key Information:

Vendor
Opentext
Status
Edirectory
Vendor
CVE Published:
12 September 2024

Summary

An external service interaction vulnerability has been identified in OpenText eDirectory, allowing potential attackers to exploit this weakness in versions preceding 9.2.6.0000. Organizations using affected versions are advised to apply patches to mitigate the risks associated with this vulnerability, as it may enable malicious actors to interact with external services in an unintended manner.

Affected Version(s)

eDirectory Windows 9.1.2 <= 9.2.5.0000

References

https://www.netiq.com/documentation/edirectory-92/edirect...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.