PT-2024-38045 · Opentext · Opentext Directory Services

Published 2024-07-26 · Updated 2024-07-29 · CVE-2024-7050

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions OpenText Directory Services version 24.2

Description The issue is related to an Improper Authentication vulnerability that may allow Multi-factor Authentication Bypass in specific scenarios.

Recommendations For OpenText Directory Services version 24.2, update to a version that includes a fix for this issue, as no specific workaround is provided in the available information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-7050

Affected Products

Opentext Directory Services

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-7050 · Security Note
• https://t.me/cvenotify/87739 · Telegram Post
• https://t.me/cvedetector/1694 · Telegram Post
• https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0821213 · Note