CVE-2023-24468: Critical severity opentext netiq advanced authentication vulnerability
Published Mar 15, 2023
·Updated
Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2
Affected Software
17 affected components
NetIQ Advanced Authentication>=6.3.0.0<6.3.7.2
NetIQ Advanced Authentication>=6.4.0.0<6.4.1.1
Microfocus Netiq Advanced Authentication<6.3
Microfocus Netiq Advanced Authentication=6.3
Microfocus Netiq Advanced Authentication=6.3-sp1
Microfocus Netiq Advanced Authentication=6.3-sp2
Microfocus Netiq Advanced Authentication=6.3-sp3
Microfocus Netiq Advanced Authentication=6.3-sp4
Microfocus Netiq Advanced Authentication=6.3-sp4_patch1
Microfocus Netiq Advanced Authentication=6.3-sp5
Microfocus Netiq Advanced Authentication=6.3-sp5_patch1
Microfocus Netiq Advanced Authentication=6.3-sp5_patch2
Microfocus Netiq Advanced Authentication=6.3-sp6
Microfocus Netiq Advanced Authentication=6.3-sp6_patch1
Microfocus Netiq Advanced Authentication=6.3-sp7
Microfocus Netiq Advanced Authentication=6.4
Microfocus Netiq Advanced Authentication=6.4-sp1
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-24468?
CVE-2023-24468 has a high severity level due to broken access control vulnerabilities that can lead to unauthorized actions.
2
How do I fix CVE-2023-24468?
To fix CVE-2023-24468, upgrade to Advanced Authentication versions 6.4.1.1 or 6.3.7.2 or later.
3
What versions are affected by CVE-2023-24468?
CVE-2023-24468 affects Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2.
4
What are the potential impacts of CVE-2023-24468?
The impacts of CVE-2023-24468 include unauthorized access to restricted features and potential data breaches.
5
Who is the vendor responsible for CVE-2023-24468?
The vendor responsible for CVE-2023-24468 is NetIQ, now part of Micro Focus.