CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2024-3488

File Upload vulnerability in unauthenticated session found in iManager.

Status: Published
Published: 2024-05-15
Updated: 2024-08-01
Assigning organization: OpenText

Description

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText iManager

Default version status: affected

3.0.0 to ≤ 3.2.6.0300affected

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html ↗