title: A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
description: Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.
problem types: CWE-266 Incorrect Privilege Assignment
affected:
{
defaultStatus: unaffected
product: Fortify ScanCentral DAST
vendor: opentext
versions:
status: affected, version: 21.1
status: affected, version: 21.2
status: affected, version: 21.2.1
status: affected, version: 22.1
status: affected, version: 22.1.1
status: affected, version: 22.2
status: affected, version: 23.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
portal.microfocus.com/s/article/KM000023500?language=en_US https://portal.microfocus.com/s/article/KM000023500