Path Traversal Vulnerability in OpenText Directory Services
CVE-2023-7249

9.8CRITICAL

Key Information:

Vendor
Opentext
Status
Opentext Directory Services
Vendor
CVE Published:
12 August 2024

Summary

A vulnerability exists in OpenText Directory Services that allows unauthorized users to exploit improper limitations on pathname restrictions, leading to Path Traversal. This security flaw permits adversaries to manipulate paths and potentially access sensitive data beyond designated directory boundaries. Affected versions span from 16.4.2 up to, but not including, 24.1, necessitating immediate action for securing affected installations against possible exploitation.

Affected Version(s)

OpenText Directory Services 16.4.2 < 24.1

References

https://support.opentext.com/csm?id=kb_article_view&syspa...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.