CVE-2024-4556
Last modified
CVE-2024-4556 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Netiq Access Manager | < 5.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-4556?
How severe is CVE-2024-4556?
How do I fix CVE-2024-4556?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45554Memory corruption during concurrent SSR execution due to rac…7
- CVE-2024-45555Memory corruption can occur if an already verified IFS2 imag…7.8
- CVE-2024-45556Cryptographic issue may arise because the access control con…6.5
- CVE-2024-45557Memory corruption can occur when TME processes addresses fro…7.8
- CVE-2024-45558Transient DOS can occur when the driver parses the per STA p…7.5
- CVE-2024-45559Transient DOS can occur when GVM sends a specific message ty…5.5
- CVE-2024-45560Memory corruption while taking a snapshot with hardware enco…7
- CVE-2024-45561Memory corruption while handling IOCTL call from user-space…7.8
- CVE-2024-45562Memory corruption during concurrent access to server info ob…7.8
- CVE-2024-45563Memory corruption while handling schedule request in Camera …7.8
- CVE-2024-45564Memory corruption during concurrent access to server info ob…7.8
- CVE-2024-45565Memory corruption when blob structure is modified by user-sp…7
Are you affected by CVE-2024-4556?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST