Skip to content
1.8 Low

CVE-2024-4211 Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools…

Description

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate ALM server names, usernames and client IDs configured to be used with ALM servers. This issue affects OpenText Application Automation Tools: 24.1.0 and below.

Affected products and versions

Product Affected versions Fixed in
OpenText Application Automation Tools Versions not published
The 5 CVEs of OpenText Application Automation Tools →
Track this CVE