title: OpenText Vertica Management console might be prone to bypass via crafted requests
description:
Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.
The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences.
This issue impacts the following Vertica Management Console versions:
10.x
11.1.1-24 or lower
12.0.4-18 or lower
Please upgrade to one of the following Vertica Management Console versions:
10.x to upgrade to latest versions from below.
11.1.1-25
12.0.4-19
23.x
24.x
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: Vertica Management Console
vendor: Opentext
versions:
status: affected, version: 10.x
lessThanOrEqual: 11.1.1-24, status: affected, version: 11.x, versionType: custom
lessThanOrEqual: 12.0.4-18, status: affected, version: 12.x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
https://portal.microfocus.com/s/article/KM000027542?language=en_US