CVE-2024-4556

HIGH 7.5CVE-2024-4556 · Published 28/08/2024 · updated 17/06/2026

In short

CVE-2024-4556 is a HIGH (CVSS 7.5) vulnerability affecting netiq access manager (microfocus).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.2% of all vulnerabilities.
Fix: update to 5.0.4 or later.

Package	Affected versions	Patched versions
netiq access manager microfocus	`< 5.0.4`	`5.0.4`

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

References

microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html · Release Notes
microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html · Release Notes

More vulnerabilities in netiq access manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netiq access manager

microfocus

< 5.0.4

5.0.4

More vulnerabilities in netiq access manager

See all →