CVE-2024-4189: Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4189?
CVE-2024-4189 is classified as a high severity vulnerability due to its potential for DTD injection.
How do I fix CVE-2024-4189?
To fix CVE-2024-4189, upgrade to a version of OpenText Application Automation Tools later than 24.1.0.
What impact does CVE-2024-4189 have?
CVE-2024-4189 can lead to unauthorized access and potentially allow attackers to execute commands on the server.
Which versions of OpenText Application Automation Tools are affected by CVE-2024-4189?
CVE-2024-4189 affects all versions of OpenText Application Automation Tools up to and including 24.1.0.
What does DTD Injection mean in the context of CVE-2024-4189?
In the context of CVE-2024-4189, DTD Injection refers to the manipulation of XML data to execute malicious commands by exploiting improper XML parsing.