PT-2024-37565 · Opentext · Opentext Vertica

Published 2024-10-02 · Updated 2025-11-19 · CVE-2024-6360

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Vertica versions 10.0 through 10.X OpenText Vertica versions 11.0 through 11.X OpenText Vertica versions 12.0 through 12.X OpenText Vertica versions 23.0 through 23.X OpenText Vertica versions 24.0 through 24.X

Description The issue is related to an Incorrect Permission Assignment for Critical Resource vulnerability, which could allow Privilege Abuse and result in unauthorized access or privileges to the Vertica agent apikey.

Recommendations For versions 10.0 through 10.X, update to a version that fixes the Incorrect Permission Assignment issue. For versions 11.0 through 11.X, update to a version that fixes the Incorrect Permission Assignment issue. For versions 12.0 through 12.X, update to a version that fixes the Incorrect Permission Assignment issue. For versions 23.0 through 23.X, update to a version that fixes the Incorrect Permission Assignment issue. For versions 24.0 through 24.X, update to a version that fixes the Incorrect Permission Assignment issue. As a temporary workaround, consider restricting access to the Vertica agent apikey to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-6360

Affected Products

Opentext Vertica

References · 8

• https://portal.microfocus.com/s/article/KM000033373?language=en_US · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-6360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6360 · Security Note
• https://t.me/cvedetector/6834 · Telegram Post
• https://t.me/cveNotify/143338 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1841578068852322621 · Twitter Post
• https://twitter.com/CVEnew/status/1841503545578913975 · Twitter Post
• https://t.me/cveNotify/138617 · Telegram Post