CVE-2024-5201
HIGHCVSS 8.8/10EPSS 0.37%
Last modified
CVE-2024-5201 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-5201?
Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request
How severe is CVE-2024-5201?
CVE-2024-5201 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.
How do I fix CVE-2024-5201?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-52004MediaCMS is an open source video and media CMS, written in P…8.7
- CVE-2024-52005Git is a source code management tool. When cloning from a se…8.8
- CVE-2024-52006Git is a fast, scalable, distributed revision control system…7.5
- CVE-2024-52007HAPI FHIR is a complete implementation of the HL7 FHIR stand…8.6
- CVE-2024-52008Fides is an open-source privacy engineering platform. The us…8.8
- CVE-2024-52009Atlantis is a self-hosted golang application that listens fo…9.8
- CVE-2024-52010Zoraxy is a general purpose HTTP reverse proxy and forwardin…8.6
- CVE-2024-52011launch-editor allows users to open files with line numbers i…8.3
- CVE-2024-52012Relative Path Traversal vulnerability in Apache Solr. Solr …5.4
- CVE-2024-52013Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154…5.7
- CVE-2024-52014Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154…5.7
- CVE-2024-52015Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154…5.7
Are you affected by CVE-2024-5201?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST