Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-4184
PUBLISHED
More InfoOfficial Page
Assigner-OpenText
Assigner Org ID-f81092c5-7f14-476d-80dc-24857f90be84
View Known Exploited Vulnerability (KEV) details
Published At-16 Oct, 2024 | 16:41
Updated At-16 Oct, 2024 | 18:55
Rejected At-
▼CVE Numbering Authority (CNA)
Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Affected Products
Vendor
Open Text CorporationOpenText
Product
OpenText Application Automation Tools
Default Status
unaffected
Versions
Affected
  • 24.1.0 and below (hpi)
Problem Types
TypeCWE IDDescription
CWECWE-611CWE-611 Improper Restriction of XML External Entity Reference
Type: CWE
CWE ID: CWE-611
Description: CWE-611 Improper Restriction of XML External Entity Reference
Metrics
VersionBase scoreBase severityVector
4.05.9MEDIUM
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Green
Version: 4.0
Base score: 5.9
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Green
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-228CAPEC-228 DTD Injection
CAPEC ID: CAPEC-228
Description: CAPEC-228 DTD Injection
Solutions

Upgrade to version 24.2 or above of OpenText Application Automation Tools addresses this vulnerability:

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://portal.microfocus.com/s/article/KM000033540?language=en_US
N/A
Hyperlink: https://portal.microfocus.com/s/article/KM000033540?language=en_US
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found