cve/2023/CVE-2023-32259.md

### [CVE-2023-32259](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32259)
![](https://img.shields.io/static/v1?label=Product&message=Asset%20Management%20X%20(AMX)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Service%20Management%20Automation%20X%20(SMAX)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%202020.05%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%202021.08%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1220%20Insufficient%20Granularity%20of%20Access%20Control&color=brighgreen)

### Description

Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/NaInSec/CVE-LIST