Low severity2.4NVD Advisory· Published Oct 16, 2024· Updated Jun 17, 2026
CVE-2024-4692
CVE-2024-4692
Description
Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.
Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names.
This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Affected products
3- cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*Range: <24.1.0
<=24.1.0+ 1 more
- (no CPE)range: <=24.1.0
- (no CPE)range: 24.1.0 and below
Patches
Vulnerability mechanics
References
1- portal.microfocus.com/s/article/KM000033546nvdVendor Advisory
News mentions
1- Jenkins Security Advisory 2024-05-24Jenkins Security Advisories · May 24, 2024