Java Database Connectivity (JDBC) URL Manipulation
Vulnerability Description
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4552
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- George Mathias
References
More from OpenText
View All →Affected Vendor
OpenText
View all reports →