« Volver al listado

CVE-2024-5201

Estado: AplazadaAlta (8.8)—

Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Opentext — Dimensions RMAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-5201",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-5201",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-24T14:07:20.265547Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@opentext.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "OpenText",
          "product": "Dimensions RM",
          "versions": [
            {
              "status": "affected",
              "version": "12.11.1.1",
              "lessThan": "12.11.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "12.11.2",
              "lessThan": "12.11.2.6",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:opentext:dimensions_rm:12.11.1.1:*:*:*:*:*:*:*"
          ],
          "vendor": "opentext",
          "product": "dimensions_rm",
          "versions": [
            {
              "status": "affected",
              "version": "12.11.1.1"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:2.3:a:opentext:dimensions_rm:12.11.2:*:*:*:*:*:*:*"
          ],
          "vendor": "opentext",
          "product": "dimensions_rm",
          "versions": [
            {
              "status": "affected",
              "version": "12.11.2"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2024-05-23T20:15:09.283",
  "references": [
    {
      "url": "https://portal.microfocus.com/s/article/KM000029985",
      "source": "security@opentext.com"
    },
    {
      "url": "https://portal.microfocus.com/s/article/KM000029985",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@opentext.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request"
    },
    {
      "lang": "es",
      "value": "La escalada de privilegios en OpenText Dimensions RM permite a un usuario autenticado escalar su privilegio al privilegio de otro usuario a través de una solicitud HTTP."
    }
  ],
  "lastModified": "2026-06-17T08:15:24.237",
  "sourceIdentifier": "security@opentext.com"
}