Description
An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link.
Affected systems:
This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenText | Universal Discovery and CMDB | 2023.05, 23.4, 24.2, 24.4, 25.2, 25.4 | 26.2 |
| OpenText | Operations Bridge Manager | 2023.05, 23.4, 24.2, 24.4, 25.2, 25.4 | 26.2 |