CVE-2024-3970 — Server-Side Request Forgery vulnerability in iManager

CVE-2024-3970

Server-Side Request Forgery vulnerability in iManager PUBLISHED

Description (CNA)

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.

Affected (CNA)

Vendor / product	Versions
OpenText / iManager	affected 3.0.0 through 3.2.6.0300

CWE

CWE-918

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html