High severity · published May 23, 2024
CVE-2024-5201
Dimensions RM - Privilege Escalation
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Dimensions RM · OpenText
12.11.1.1 before 12.11.1.3; 12.11.2 before 12.11.2.6 · source: vendor, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5201
portal.microfocus.com
https://portal.microfocus.com/s/article/KM000029985
More from Dimensions RM
7.7
CVE-2024-5202
Dimensions RM - Arbitrary File Read