CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-3968

Remote Code Execution vulnerability in the iManager

Status: Published
Published: 2024-05-15
Updated: 2024-08-01
Assigning organization: OpenText

Description

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText iManager

Default version status: affected

3.0.0 to ≤ 3.2.6.0300affected

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html ↗