CVE-2023-4550

Summary

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.

This issue affects AppBuilder: from 21.2 before 23.2.

Affected Software

VendorProductVersion RangeStatus
OpenTextAppBuilder23.2unaffected
OpenTextAppBuilder21.2 < 23.2affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation
  • CWE-552: CWE-552 Files or Directories Accessible to External Parties

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References