CVE-2024-4555

Опубликовано: 28 авг. 2024

Источник: nvd

CVSS3: 7.7

CVSS3: 7.5

EPSS Низкий

Описание

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1

Ссылки

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html
Release Notes
Vendor Advisory
https://www.microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*

Версия до 5.0.4.1 (исключая)

EPSS

Процентиль: 17%

0.00258

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-266

CWE-269

Связанные уязвимости

GHSA-482j-q2mw-67xq

CVSS3: 7.7

github

около 2 лет назад

EPSS

Процентиль: 17%

0.00258

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-266

CWE-269