CVE-2023-32260 - OpenCVE

Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

No data.

No data.

References

Link	Resource
https://portal.microfocus.com/s/article/KM000018804?language=en_US

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: OpenText

Published: 2024-03-19T15:54:23.508Z

Updated: 2024-06-04T17:26:13.050Z

Reserved: 2023-05-05T14:42:20.152Z

Link: CVE-2023-32260

JSON object: View

NVD Information

Status : Awaiting Analysis

Published: 2024-03-19T16:15:08.260

Modified: 2024-03-19T16:33:58.680

Link: CVE-2023-32260

JSON object: View

Redhat Information

No data.

CWE

CWE-115

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-32260", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "state": "PUBLISHED", "assignerShortName": "OpenText", "dateReserved": "2023-05-05T14:42:20.152Z", "datePublished": "2024-03-19T15:54:23.508Z", "dateUpdated": "2024-06-04T17:26:13.050Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Service Management Automation X (SMAX)", "vendor": "OpenText\u2122", "versions": [{"status": "affected", "version": "2020.05"}, {"status": "affected", "version": "2020.08"}, {"status": "affected", "version": "2020.11"}, {"status": "affected", "version": "2021.02"}, {"status": "affected", "version": "2021.05"}, {"status": "affected", "version": "2021.08"}, {"status": "affected", "version": "2021.11"}, {"status": "affected", "version": "2022.05"}, {"status": "affected", "version": "2022.11"}, {"status": "affected", "version": "2023.05"}]}, {"defaultStatus": "unaffected", "product": "Asset Management X (AMX)", "vendor": "OpenText\u2122", "versions": [{"status": "affected", "version": "2021.08"}, {"status": "affected", "version": "2021.11"}, {"status": "affected", "version": "2022.05"}, {"status": "affected", "version": "2022.11"}, {"status": "affected", "version": "2023.05"}]}, {"defaultStatus": "unaffected", "product": "Hybrid Cloud Management X (HCMX)", "vendor": "OpenText\u2122", "versions": [{"status": "affected", "version": "2020.05"}, {"status": "affected", "version": "2020.08"}, {"status": "affected", "version": "2020.11"}, {"status": "affected", "version": "2021.02"}, {"status": "affected", "version": "2021.05"}, {"status": "affected", "version": "2021.08"}, {"status": "affected", "version": "2021.11"}, {"status": "affected", "version": "2022.05"}, {"status": "affected", "version": "2022.11"}, {"status": "affected", "version": "2023.05"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Misinterpretation of Input vulnerability in OpenText\u2122 Service Management Automation X (SMAX), OpenText\u2122 Asset Management X (AMX), and OpenText\u2122 Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.<p>This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.</p>"}], "value": "Misinterpretation of Input vulnerability in OpenText\u2122 Service Management Automation X (SMAX), OpenText\u2122 Asset Management X (AMX), and OpenText\u2122 Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.\n\n"}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-115", "description": "CWE-115 Misinterpretation of Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-03-19T15:54:23.508Z"}, "references": [{"url": "https://portal.microfocus.com/s/article/KM000018804?language=en_US"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<a target=\"_blank\" rel=\"nofollow\" href=\"https://portal.microfocus.com/s/article/KM000018804?language=en_US\">https://portal.microfocus.com/s/article/KM000018804?language=en_US</a><br>"}], "value": " https://portal.microfocus.com/s/article/KM000018804?language=en_US \n"}], "source": {"discovery": "UNKNOWN"}, "title": "A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-32260", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-19T17:25:55.218838Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:26:13.050Z"}}]}}

{"descriptions": [{"lang": "en", "value": "Misinterpretation of Input vulnerability in OpenText\u2122 Service Management Automation X (SMAX), OpenText\u2122 Asset Management X (AMX), and OpenText\u2122 Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.\n\n"}, {"lang": "es", "value": "Interpretaci\u00f3n err\u00f3nea de la vulnerabilidad de entrada en los productos OpenText\u2122 Service Management Automation X (SMAX), OpenText\u2122 Asset Management X (AMX) y OpenText\u2122 Hybrid Cloud Management X (HCMX). La vulnerabilidad podr\u00eda permitir la manipulaci\u00f3n de datos de entrada. Este problema afecta a las versiones de Service Management Automation X (SMAX): 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Versiones de Asset Management X (AMX): 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; y versiones de Hybrid Cloud Management X (HCMX): 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05."}], "id": "CVE-2023-32260", "lastModified": "2024-03-19T16:33:58.680", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@opentext.com", "type": "Secondary"}]}, "published": "2024-03-19T16:15:08.260", "references": [{"source": "security@opentext.com", "url": "https://portal.microfocus.com/s/article/KM000018804?language=en_US"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-115"}], "source": "security@opentext.com", "type": "Secondary"}]}