{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T14:44:14.484","vulnerabilities":[{"cve":{"id":"CVE-2024-6360","sourceIdentifier":"security@opentext.com","published":"2024-10-02T16:15:11.103","lastModified":"2026-06-17T08:17:51.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica agent apikey.\nThis issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X."},{"lang":"es","value":"La vulnerabilidad de asignación incorrecta de permisos para recursos críticos en OpenText™ Vertica podría permitir el abuso de privilegios y dar como resultado el acceso no autorizado o los privilegios a la clave API del agente de Vertica. Este problema afecta a Vertica: de la versión 10.0 a la 10.X, de la versión 11.0 a la 11.X, de la versión 12.0 a la 12.X, de la versión 23.0 a la 23.X, de la versión 24.0 a la 24.X."}],"affected":[{"source":"security@opentext.com","affectedData":[{"vendor":"OpenText™","product":"Vertica","defaultStatus":"unaffected","versions":[{"version":"10.0","lessThanOrEqual":"10.x","versionType":"custom","status":"affected"},{"version":"11.0","lessThanOrEqual":"11.x","versionType":"custom","status":"affected"},{"version":"12.0","lessThanOrEqual":"12.x","versionType":"custom","status":"affected"},{"version":"23.0","lessThanOrEqual":"23.x","versionType":"custom","status":"affected"},{"version":"24.0","lessThanOrEqual":"24.x","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@opentext.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:L/U:Green","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"YES","Recovery":"USER","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"LOW","providerUrgency":"GREEN"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-02T16:23:57.623653Z","id":"CVE-2024-6360","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@opentext.com","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:vertica:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0-0","versionEndExcluding":"12.0.4-30","matchCriteriaId":"F4A97CBA-CE91-4F9F-9A85-6FD7E648E330"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:vertica:*:*:*:*:*:*:*:*","versionStartIncluding":"23.0.0-0","versionEndExcluding":"23.3.0-11","matchCriteriaId":"8474396A-2075-4DC5-A0AD-EE68273DAD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:vertica:*:*:*:*:*:*:*:*","versionStartIncluding":"23.4.0-0","versionEndExcluding":"23.4.0-13","matchCriteriaId":"D4B94CC9-3617-46F7-843A-129A00BD8D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*","versionStartIncluding":"24.1.0-0","versionEndExcluding":"24.1.0-8","matchCriteriaId":"D740B9B2-4F80-4D55-8B00-73B82CCC1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*","versionStartIncluding":"24.2.0-0","versionEndExcluding":"24.2.0-4","matchCriteriaId":"2DD94CBC-CA6B-469A-8395-C5A833C54DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:vertica:24.3.0-0:*:*:*:*:*:*:*","matchCriteriaId":"63B12357-FB4A-437D-AAD2-EC5BB7E0D789"}]}]}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000033373?language=en_US","source":"security@opentext.com","tags":["Vendor Advisory"]}]}}]}