PT-2024-31687 · Opentext · Opentext Netiq Access Manager

Published 2024-08-27 · Updated 2025-10-06 · CVE-2024-4555

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 OpenText NetIQ Access Manager versions prior to 5.1

Description: The issue is related to improper privilege management, allowing user account impersonation in a specific scenario.

Recommendations: For versions prior to 5.0.4.1, update to version 5.0.4.1 or later. For versions prior to 5.1, update to version 5.1 or later.

Fix

Improper Privilege Management

Incorrect Privilege Assignment

Weakness Enumeration

CWE-269

CWE-266

Related Identifiers

CVE-2024-4555

Affected Products

Opentext Netiq Access Manager

References · 10

• https://microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html · Vendor Advisory
• https://microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-4555 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4555 · Security Note
• https://twitter.com/cracbot/status/1830123556090380692 · Twitter Post
• https://t.me/cveNotify/137498 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1828748621308629428 · Twitter Post
• https://t.me/latest_high_impact_cve/1070 · Telegram Post
• https://t.me/cvedetector/4307 · Telegram Post
• https://twitter.com/CVEnew/status/1828684721552843150 · Twitter Post