CVE-2024-4555CWE-266

User impersonation with MFA when configure in specific way

High · published August 28, 2024

CVSS v3.1
7.7
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-08-28T06:27Z
EPSS history
Timeline
  • 28 AUG 06:27Z
    User impersonation with MFA when configure in specific way
    cvelistv5