CVE-2023-32259 - CVE House

Back to Database

Status published Medium CVE-2023-32259

Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.

6.5 CVSS

Vulnerability Description

Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32259

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://portal.microfocus.com/s/article/KM000018803?language=en_US

More from OpenText™

View All →

Stored-XSS vulnerability discovered in OpenText WSM Management Server.

RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

SSRF vulnerability have been discovered in OpenText™ XM Fax

Path Traversal vulnerability have been discovered in OpenText™ XM Fax.

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability...

Affected Vendor

OpenText™

View all reports →

Affected Software

Service Management Automation X (SMAX), Asset Management X (AMX)

Vulnerable Versions:

2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11

Timeline

Official Publish: March 19th, 2024

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.