Paper/Archive/CVE-2024-6360

CVE-2024-6360

OpenText™ Vertica — Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 23.6.236 × 204.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica agent apikey. This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X.

Affected

ProductAffectedFixed inSource

Vertica10.0 – 10.x–CNA

Vertica11.0 – 11.x–CNA

Vertica12.0 – 12.x–CNA

Vertica23.0 – 23.x–CNA

Vertica24.0 – 24.x–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OpenText (CNA)6.9CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/AU:Y/R:U/RE:L/U:Green

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refportal.microfocus.com/s/article/KM000033373?language=en_US