CVE-2021-38117 - Vulnerability Details - OpenCVE

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Microfocus	Imanager
Opentext	Imanager

Configuration 1 [-]

cpe:2.3:a:microfocus:imanager:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html

History

Thu, 10 Apr 2025 20:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microfocus Microfocus imanager
Weaknesses		CWE-77
CPEs		cpe:2.3:a:microfocus:imanager::::::::
Vendors & Products		Microfocus Microfocus imanager

Mon, 25 Nov 2024 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Opentext Opentext imanager
CPEs		cpe:2.3:a:opentext:imanager::::::::
Vendors & Products		Opentext Opentext imanager
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 22 Nov 2024 15:45:00 +0000

Type	Values Removed	Values Added
Description		Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.
Title		Possible Remote Code Execution Vulnerability OpenText iManager
Weaknesses		CWE-94
References		https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: OpenText

Published: 2024-11-22T15:34:41.566Z

Updated: 2024-11-25T18:10:33.565Z

Reserved: 2021-08-04T20:57:01.487Z

Link: CVE-2021-38117

Vulnrichment

Updated: 2024-11-25T18:10:29.393Z

NVD

Status : Analyzed

Published: 2024-11-22T16:15:18.823

Modified: 2025-04-10T20:25:24.830

Link: CVE-2021-38117

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-38117", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "state": "PUBLISHED", "assignerShortName": "OpenText", "dateReserved": "2021-08-04T20:57:01.487Z", "datePublished": "2024-11-22T15:34:41.566Z", "dateUpdated": "2024-11-25T18:10:33.565Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Windows", "Linux", "64 bit"], "product": "iManager", "vendor": "OpenText", "versions": [{"lessThanOrEqual": "3.2.4.0000", "status": "affected", "version": "3.0.0", "versionType": "rpm, exe"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<strong>Possible Command injection Vulnerability\n\nin iManager </strong><strong>has been discovered in\nOpenText\u2122 </strong><strong>iManager 3.2.4.0000</strong><strong>.<br></strong>"}], "value": "Possible Command injection Vulnerability\n\nin iManager has been discovered in\nOpenText\u2122 iManager 3.2.4.0000."}], "impacts": [{"capecId": "CAPEC-242", "descriptions": [{"lang": "en", "value": "CAPEC-242 Code Injection"}]}, {"capecId": "CAPEC-35", "descriptions": [{"lang": "en", "value": "CAPEC-35 Leverage Executable Code in Non-Executable Files"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-11-22T15:34:41.566Z"}, "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Possible Remote Code Execution Vulnerability OpenText iManager", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "opentext", "product": "imanager", "cpes": ["cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.0.0", "status": "affected", "lessThanOrEqual": "3.2.4.0000", "versionType": "rpm"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-25T18:09:19.610981Z", "id": "CVE-2021-38117", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-25T18:10:33.565Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-38117", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-25T18:09:19.610981Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:opentext:imanager:*:*:*:*:*:*:*:*"], "vendor": "opentext", "product": "imanager", "versions": [{"status": "affected", "version": "3.0.0", "versionType": "rpm", "lessThanOrEqual": "3.2.4.0000"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-25T18:10:29.393Z"}}], "cna": {"title": "Possible Remote Code Execution Vulnerability OpenText iManager", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-242", "descriptions": [{"lang": "en", "value": "CAPEC-242 Code Injection"}]}, {"capecId": "CAPEC-35", "descriptions": [{"lang": "en", "value": "CAPEC-35 Leverage Executable Code in Non-Executable Files"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OpenText", "product": "iManager", "versions": [{"status": "affected", "version": "3.0.0", "versionType": "rpm, exe", "lessThanOrEqual": "3.2.4.0000"}], "platforms": ["Windows", "Linux", "64 bit"], "defaultStatus": "affected"}], "references": [{"url": "https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Possible Command injection Vulnerability\n\nin iManager has been discovered in\nOpenText\u2122 iManager 3.2.4.0000.", "supportingMedia": [{"type": "text/html", "value": "<strong>Possible Command injection Vulnerability\n\nin iManager </strong><strong>has been discovered in\nOpenText\u2122 </strong><strong>iManager 3.2.4.0000</strong><strong>.<br></strong>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2024-11-22T15:34:41.566Z"}}}, "cveMetadata": {"cveId": "CVE-2021-38117", "state": "PUBLISHED", "dateUpdated": "2024-11-25T18:10:33.565Z", "dateReserved": "2021-08-04T20:57:01.487Z", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "datePublished": "2024-11-22T15:34:41.566Z", "assignerShortName": "OpenText"}, "dataVersion": "5.1"}