CVE-2024-3484 - OpenCVE

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: OpenText

Published: 2024-05-15T16:44:51.636Z

Updated: 2024-08-01T20:12:07.760Z

Reserved: 2024-04-08T19:19:53.181Z

Link: CVE-2024-3484

Vulnrichment

Updated: 2024-08-01T20:12:07.760Z

NVD

Status : Awaiting Analysis

Published: 2024-05-15T17:15:13.207

Modified: 2024-05-15T18:35:11.453

Link: CVE-2024-3484

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-3484", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "state": "PUBLISHED", "assignerShortName": "OpenText", "dateReserved": "2024-04-08T19:19:53.181Z", "datePublished": "2024-05-15T16:44:51.636Z", "dateUpdated": "2024-08-01T20:12:07.760Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Windows", "Linux", "64 bit"], "product": "iManager", "vendor": "OpenText", "versions": [{"lessThanOrEqual": "3.2.6.0300", "status": "affected", "version": "3.0.0", "versionType": "rpm, exe"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Blaine Herro (Yahoo! Inc. VRT)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<strong>Path Traversal found </strong><strong>in OpenText\u2122 </strong><strong>iManager 3.2.6.0200</strong><strong>. This <strong>can lead to privilege escalation\nor file disclosure.</strong>\n\n\n\n</strong>"}], "value": "Path Traversal found\u00a0in OpenText\u2122 iManager 3.2.6.0200. This can lead to privilege escalation\nor file disclosure.\n\n"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}, {"capecId": "CAPEC-497", "descriptions": [{"lang": "en", "value": "CAPEC-497 File Discovery"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-05-15T16:44:51.636Z"}, "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Path Traversal vulnerability found in iManager", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-3484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-15T17:31:49.174793Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:microfocus:imanager:3.0:-:*:*:*:*:*:*"], "vendor": "microfocus", "product": "imanager", "versions": [{"status": "affected", "version": "3.0", "versionType": "custom", "lessThanOrEqual": "3.2.6.0300"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:32:01.210Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:12:07.760Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T20:12:07.760Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-3484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-15T17:31:49.174793Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:microfocus:imanager:3.0:-:*:*:*:*:*:*"], "vendor": "microfocus", "product": "imanager", "versions": [{"status": "affected", "version": "3.0", "versionType": "custom", "lessThanOrEqual": "3.2.6.0300"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-15T17:32:04.971Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Path Traversal vulnerability found in iManager", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Blaine Herro (Yahoo! Inc. VRT)"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}, {"capecId": "CAPEC-497", "descriptions": [{"lang": "en", "value": "CAPEC-497 File Discovery"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OpenText", "product": "iManager", "versions": [{"status": "affected", "version": "3.0.0", "versionType": "rpm, exe", "lessThanOrEqual": "3.2.6.0300"}], "platforms": ["Windows", "Linux", "64 bit"], "defaultStatus": "affected"}], "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Path Traversal found\u00a0in OpenText\u2122 iManager 3.2.6.0200. This can lead to privilege escalation\nor file disclosure.\n\n", "supportingMedia": [{"type": "text/html", "value": "<strong>Path Traversal found </strong><strong>in OpenText\u2122 </strong><strong>iManager 3.2.6.0200</strong><strong>. This <strong>can lead to privilege escalation\nor file disclosure.</strong>\n\n\n\n</strong>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-05-15T16:44:51.636Z"}}}, "cveMetadata": {"cveId": "CVE-2024-3484", "state": "PUBLISHED", "dateUpdated": "2024-08-01T20:12:07.760Z", "dateReserved": "2024-04-08T19:19:53.181Z", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "datePublished": "2024-05-15T16:44:51.636Z", "assignerShortName": "OpenText"}, "dataVersion": "5.1"}