CVE-2024-4692
Last modified
CVE-2024-4692 is a low-severity vulnerability rated 2.4/10 on the CVSS scale. Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names. This issue affects OpenText Application Automation Tools: 24.1.0 and below.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names. This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:X/V:X/RE:L/U:Clear
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Application Automation Tools | < 24.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-4692?
How severe is CVE-2024-4692?
How do I fix CVE-2024-4692?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-46914Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
- CVE-2024-46915Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2024-46916Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 co…8.1
- CVE-2024-46917Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 do…8.1
- CVE-2024-46918app/Controller/UserLoginProfilesController.php in MISP befor…4.9
- CVE-2024-46919An issue was discovered in Samsung Mobile Processor Exynos 9…5.3
- CVE-2024-46920An issue was discovered in Samsung Mobile Processor Exynos 9…6.5
- CVE-2024-46921An issue was discovered in Samsung Mobile Processor and Mode…6.5
- CVE-2024-46922An issue was discovered in Samsung Mobile Processor Exynos 1…7.5
- CVE-2024-46923An issue was discovered in Samsung Mobile Processor Exynos 2…7.5
- CVE-2024-4693A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/…5.5
- CVE-2024-46933An issue was discovered in Atos Eviden BullSequana XH2140 BM…7.7
Are you affected by CVE-2024-4692?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST