CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-3970

Server-Side Request Forgery vulnerability in iManager

Status: Published
Published: 2024-05-15
Updated: 2024-08-01
Assigning organization: OpenText

Description

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText iManager

Default version status: affected

3.0.0 to ≤ 3.2.6.0300affected

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html ↗