2 lines
3.7 KiB
JSON
2 lines
3.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Non-Windows"],"product":"Operations Agent ","vendor":"opentext","versions":[{"status":"affected","version":"12.15"},{"status":"affected","version":"12.20"},{"status":"affected","version":"12.21"},{"status":"affected","version":"12.22"},{"status":"affected","version":"12.23"},{"status":"affected","version":"12.24"},{"status":"affected","version":"12.25"}]}],"source":"security@opentext.com"},{"affectedData":[{"cpes":["cpe:2.3:a:microfocus:operations_agent:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"operations_agent","vendor":"microfocus","versions":[{"status":"affected","version":"12.15"},{"status":"affected","version":"12.20"},{"status":"affected","version":"12.21"},{"status":"affected","version":"12.22"},{"status":"affected","version":"12.23"},{"status":"affected","version":"12.24"},{"status":"affected","version":"12.25"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microfocus:operations_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"60CE247E-60E8-4397-A847-5B0701406D54","versionEndIncluding":"12.25","versionStartIncluding":"12.20","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:operations_agent:12.15:*:*:*:*:*:*:*","matchCriteriaId":"973DFAB3-05AE-49A0-917B-ADAD9C296322","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local privilege escalation. \n"},{"lang":"es","value":"La vulnerabilidad de escalada de privilegios local afecta las versiones 12.15 y 12.20-12.25 del producto OpenText Operations Agent cuando se instala en plataformas que no son Windows. La vulnerabilidad podría permitir una escalada de privilegios locales."}],"id":"CVE-2024-0622","lastModified":"2026-06-17T06:53:54.943","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.0,"impactScore":6.0,"source":"security@opentext.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0622","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-02-20T19:28:21.722838Z","version":"2.0.3"}}]},"published":"2024-02-15T21:15:08.860","references":[{"source":"security@opentext.com","tags":["Vendor Advisory"],"url":"https://portal.microfocus.com/s/article/KM000026555?language=en_US"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://portal.microfocus.com/s/article/KM000026555?language=en_US"}],"sourceIdentifier":"security@opentext.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"security@opentext.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|