CVE-2023-6400

Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.

Severity Score

7.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management (ZCM) allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management (ZCM) versions: 2020 update 3, 23.3, and 23.4.

Una vulnerabilidad de autorización incorrecta en OpenText™ ZENworks Configuration Management (ZCM) permite el uso no autorizado de recursos del dispositivo. Este problema afecta a las versiones de ZENworks Configuration Management (ZCM): actualización 3, 23.3 y 23.4 de 2020.

*Credits: N/A

CVSS Scores

OpenTextv3.1 7.4

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-11-30 CVE Reserved
2024-03-27 CVE Published
2024-03-28 EPSS Updated
2024-08-15 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-863: Incorrect Authorization

CAPEC

CAPEC-629: DEPRECATED: Unauthorized Use of Device Resources

References (1)

URL	Tag	Source
https://portal.microfocus.com/s/article/KM000027630?language=en_US

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
OpenText™ Search vendor "OpenText™"		ZENworks Configuration Management (ZCM) Search vendor "OpenText™" for product "ZENworks Configuration Management (ZCM)"				23.3 Search vendor "OpenText™" for product "ZENworks Configuration Management (ZCM)" and version "23.3"		en		Affected
OpenText™ Search vendor "OpenText™"		ZENworks Configuration Management (ZCM) Search vendor "OpenText™" for product "ZENworks Configuration Management (ZCM)"				23.4 Search vendor "OpenText™" for product "ZENworks Configuration Management (ZCM)" and version "23.4"		en		Affected