CVE-2024-4556

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
OpenTextNetIQ Access Manager>= 5.0.4.1, < < =; >= 5.1, < <
netiqaccess_manager< 5.0.4.1; < 5.1

References

Timeline

Published
Aug 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-455607.0Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.CVE-2024-455617.8Memory corruption while handling IOCTL call from user-space to set latency level.CVE-2024-455627.8Memory corruption during concurrent access to server info object due to unprotected critical field.CVE-2024-455637.8Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.CVE-2024-455647.8Memory corruption during concurrent access to server info object due to incorrect reference count update.CVE-2024-455657.0Memory corruption when blob structure is modified by user-space after kernel verification.CVE-2024-455667.8Memory corruption during concurrent buffer access due to modification of the reference count.CVE-2024-455677.8Memory corruption while encoding JPEG format.CVE-2024-455687.8Memory corruption due to improper bounds check while command handling in camera-kernel driver.CVE-2024-455699.8Memory corruption while parsing the ML IE due to invalid frame content.CVE-2024-45576.5Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, sCVE-2024-455707.8Memory corruption may occur during IO configuration processing when the IO port count is invalid.
CVE-2024-4556: High severity, CVSS 7.5 | Vulnix