CVE-2024-4184: Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools
Published Oct 16, 2024
·Updated
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Affected Software
1 affected component
MicroFocus Application Automation Tools Jenkins<=24.1.0
Remediation
Information
Upgrade to version 24.2 or above of OpenText Application Automation Tools addresses this vulnerability:
Event History
Oct 16, 2024
CVE Published
via MITRE·04:41 PM
Data Sourced
via MITRE·04:41 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-4184?
CVE-2024-4184 is classified as a critical vulnerability due to its potential for DTD injection.
2
How do I fix CVE-2024-4184?
To mitigate CVE-2024-4184, upgrade OpenText Application Automation Tools to version 24.1.1 or later.
3
What software is affected by CVE-2024-4184?
CVE-2024-4184 affects OpenText Application Automation Tools versions 24.1.0 and below.
4
What types of attacks can CVE-2024-4184 facilitate?
CVE-2024-4184 can facilitate DTD injection attacks, which may lead to sensitive data exposure or manipulation.
5
Is there a workaround for CVE-2024-4184 if an upgrade is not possible?
There are no documented workarounds for CVE-2024-4184; the recommended action is to perform the upgrade.