Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-32259
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.
Source: NVD (National Vulnerability Database)
Vulnerability Description
Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1220
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenText Service Management Automation X 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenText Service Management Automation X是美国OpenText公司的一种让一切变得简单的高级服务管理。基于嵌入式机器学习和分析，为 IT 服务管理 (ITSM)、IT 资产管理 (ITAM) 和企业服务管理 (ESM) 提供更智能的方法。 OpenText Service Management Automation X 存在安全漏洞，该漏洞源于访问控制粒度不足，允许攻击者在未经适当授权的情况下提交创意记录，以下产品和版本受到影响：Service Management
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
OpenText™Service Management Automation X (SMAX) 2020.05 -
OpenText™Asset Management X (AMX) 2021.08 -
II. Public POCs for CVE-2023-32259
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2023-32259
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: Service Management Automation X (SMAX)
Same vendor: OpenText™
Same weakness: CWE-1220
V. Comments for CVE-2023-32259

No comments yet

Leave a comment