CVE-2024-1470

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1470
Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 4.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://portal.microfocus.com/s/article/KM000026667?language=en_US
https://portal.microfocus.com/s/article/KM000026667?language=en_US
Configurations

No configuration.

History

21 Nov 2024, 08:50

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en la extensión de inicio de sesión del cliente NetIQ (OpenText) en Windows permite la escalada de privilegios y la inyección de código. Este problema solo afecta a la extensión de inicio de sesión del cliente NetIQ: 4.6.
References () https://portal.microfocus.com/s/article/KM000026667?language=en_US - () https://portal.microfocus.com/s/article/KM000026667?language=en_US -

29 Feb 2024, 01:43

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-29 01:43

Updated : 2024-11-21 08:50

NVD link : CVE-2024-1470

Mitre link : CVE-2024-1470

CVE.ORG link : CVE-2024-1470

JSON object : View

Products Affected

No product.

CWE
CWE-639

Authorization Bypass Through User-Controlled Key