Paper/Archive/CVE-2021-38132

CVE-2021-38132

OpenText eDirectory — Possible External service interaction Vulnerability

Description · from the CVE record

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.

Affected

ProductAffectedFixed inSource
eDirectory9.1.2 – 9.2.5.0000–CNA
edirectory9.1.2 – 9.2.5.0000–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
OpenText (CNA)5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refnetiq.com/documentation/edirectory-92/edirectory926_releasenotes/data/edirectory926_releasenotes.html