Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.
Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-1220 | CWE-1220 Insufficient Granularity of Access Control |
Type: CWE
Description: CWE-1220 Insufficient Granularity of Access Control
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impacts
| CAPEC ID | Description |
|---|
| CAPEC-180 | CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels |
Description: CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels