CVE-2023-4550 — Unauthenticated Arbitrary File Read

Description (CNA)

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. This issue affects AppBuilder: from 21.2 before 23.2.

Affected (CNA)

Vendor / product	Versions
OpenText / AppBuilder	unaffected 23.2; affected 21.2 before 23.2

CWE

CWE-20, CWE-552

References

https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b

ADP enrichment

CVE

No English description supplied.

https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b

CISA-ADP

No English description supplied.

No references supplied.