Search/CVE-2024-1470
● CVE — High

CVE-2024-1470

VendornetiqProductclient login extensionDiscoveredFeb 29, 2024UpdatedFeb 14, 2025

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6.

View graph Watch Export
CVSS v3.1
7.1 HIGH
EPSS
0.19%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityLOW
IntegrityHIGH
AvailabilityNONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
Connections
2 relationships
Timeline
disclosure → media coverage
Feb 29, 2024
Disclosure — published as a CVE record. · last revised by NVD Feb 14, 2025