1. Home
  2. CVE Database
  3. CVE-2023-4552
MEDIUM · 5.5

CVE-2023-4552

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases ca...

Vulnerability Description

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
OpentextAppbuilder>= 21.2, < 23.2
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2023-4552?

CVE-2023-4552 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases ca...

How severe is CVE-2023-4552?

CVE-2023-4552 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4552?

Check the references section above for vendor advisories and patch information. Affected products include: Opentext Appbuilder, Linux Linux Kernel, Microsoft Windows.