CVE-2024-4556

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.
Configurations

Configuration 1 (hide)

cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*

History

12 Sep 2024, 15:09

Type Values Removed Values Added
CPE cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 5.7
v2 : unknown
v3 : 7.5
First Time Microfocus
Microfocus netiq Access Manager
References () https://www.microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html - () https://www.microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html - Release Notes
References () https://www.microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html - () https://www.microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html - Release Notes

28 Aug 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido ("Path Traversal") en OpenText NetIQ Access Manager permite acceder a información confidencial. Este problema afecta a NetIQ Access Manager anterior a 5.0.4 y anterior a 5.1.

28 Aug 2024, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-28 07:15

Updated : 2024-09-12 15:09


NVD link : CVE-2024-4556

Mitre link : CVE-2024-4556

CVE.ORG link : CVE-2024-4556


JSON object : View

Products Affected

microfocus

  • netiq_access_manager
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')