CVE-2024-4211CWE-280

Multiple missing permission checks

Low · published October 16, 2024

CVSS v4.0
1.8
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate ALM server names, usernames and client IDs configured to be used with ALM servers.

This issue affects OpenText Application Automation Tools: 24.1.0 and below.

The record
Technical detail
CVSS v4.0
1.8 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2024-10-16T16:41Z
EPSS history
Timeline
  • 16 OCT 16:41Z
    Multiple missing permission checks
    cvelistv5