PT-2024-38341 · Opentext · Opentext Network Node Manager I

Published 2024-08-23 · Updated 2024-08-27 · CVE-2024-7428

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/S:N/AU:N/R:A/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions OpenText Network Node Manager i versions 2022.11 through 24.2

Description The issue affects OpenText Network Node Manager i, allowing URL Redirector Abuse due to a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. This enables the redirector of URL abuse.

Recommendations For versions 2022.11 through 24.2, update the system to mitigate risks, as remediation details are currently unavailable. Ensure your systems are updated to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-7428

Affected Products

Opentext Network Node Manager I

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-7428 · Security Note
• https://portal.microfocus.com/s/article/KM000033015?language=en_US · Note
• https://twitter.com/transilienceai/status/1828375677252374884 · Twitter Post
• https://twitter.com/CVEnew/status/1827035771884257766 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1827069593287864528 · Twitter Post
• https://t.me/cvedetector/4018 · Telegram Post
• https://twitter.com/transilienceai/status/1827131476040937666 · Twitter Post