CVE-2024-0622 Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.
Local attackers can escalate privileges on OpenText Operations Agent installations on non-Windows platforms.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-0622?
CVE-2024-0622 is a high-severity vulnerability in opentext Operations Agent , published on 15 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local privilege escalation.
Weakness: CWE-269
Which versions are affected by CVE-2024-0622?
It affects 1 product.
Products include Microfocus Operations Agent.
How do I fix CVE-2024-0622?
No fix has been published for CVE-2024-0622 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-0622 being exploited?
There is no known exploitation of CVE-2024-0622 in the wild and no public exploit code.
Other vulnerabilities in opentext Operations Agent
- CVE-2021-22505 Privilege escalation in Operations Agent
- CVE-2026-2123 Privilege escalation vulnerability in Operations Agent
- CVE-2020-11861 Privilege escalation in Operations Agent
- CVE-2019-17085 XML external entity in Operations Agent
- CVE-2021-38129 Information disclosure in Micro Focus Operations Agent.
Sources
Also known as GHSA-jwwf-c2fg-p2mq.