CVE-2024-1470

Опубликовано: 29 фев. 2024

Источник: nvd

CVSS3: 7.1

CVSS3: 7.8

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue

only

affects NetIQ Client Login Extension: 4.6.

Ссылки

https://portal.microfocus.com/s/article/KM000026667?language=en_US
Third Party Advisory
https://portal.microfocus.com/s/article/KM000026667?language=en_US
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netiq:client_login_extension:4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00013

Низкий

7.1 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-639

Связанные уязвимости

GHSA-g66m-2gg5-929w

CVSS3: 7.1

github

почти 2 года назад

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6.

EPSS

Процентиль: 2%

0.00013

Низкий

7.1 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-639