CVE-2024-4211: Multiple missing permission checks
Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.
Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate ALM server names, usernames and client IDs configured to be used with ALM servers.
This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4211?
CVE-2024-4211 is considered a high severity vulnerability due to improper validation of input allowing for potential access control issues.
How do I fix CVE-2024-4211?
To fix CVE-2024-4211, ensure proper permission checks are implemented in your configurations of OpenText Application Automation Tools.
What versions of Microfocus Application Automation Tools are affected by CVE-2024-4211?
CVE-2024-4211 affects all versions of Microfocus Application Automation Tools up to and including version 24.1.0.
What type of vulnerability is CVE-2024-4211?
CVE-2024-4211 is classified as an Improper Validation of Specified Quantity in Input vulnerability.
What can attackers exploit in CVE-2024-4211?
Attackers can exploit CVE-2024-4211 by gaining unauthorized access due to incorrectly configured access control security levels.