Incorrect Access Control Security Levels Allow for Unauthorized Data Access
CVE-2024-4692

2.4LOW

Key Information:

Vendor
OpenText
Status
Application Automation Tools
Vendor
CVE Published:
16 October 2024

Summary

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names.

This issue affects OpenText Application Automation Tools: 24.1.0 and below.

References

https://portal.microfocus.com/s/article/KM000033546?langu...

CVSS V3.1

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.