CVE-2024-5202 - Dimensions RM - Arbitrary File Read · CoreCVE

Back Back to CVE browser

HIGH

Dimensions RM - Arbitrary File Read

Published May 23, 2024

7.7

HIGH

CVSS 3.1

EPSS 0.36%

Description

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices

Affected products

Vendor OpenText Product Dimensions RM Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <12.11.1.3
- Version
  12.11.2
  Status
  affected
  Constraints
  <12.11.2.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<12.11.1.3
12.11.2	affected	<12.11.2.6

Vendor Opentext Product Dimensions RM Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <12.11.1.3
- Version
  12.11.2
  Status
  affected
  Constraints
  <12.11.2.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<12.11.1.3
12.11.2	affected	<12.11.2.6

Remediation

Vendor solution

https://portal.microfocus.com/s/article/KM000029988

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46443		Advisory
https://portal.microfocus.com/s/article/KM000029988

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner OpenText

Published May 23, 2024

Updated Aug 1, 2024

Reserved May 22, 2024

Link CVE-2024-5202

CISA Vulnrichment

Updated May 24, 2024

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-5202

Severity n/a

Public date n/a

Links CVE-2024-5202

Assigner OpenText

Published May 23, 2024

Updated Aug 1, 2024

Exploited since n/a

Link EUVD-2024-46443

EUVD-2024-46443