Search vulnerabilities

Results 3

Export CSV
CVE-2024-12111

Potential LDAP injection vulnerability in OpenText Privileged Access Manager

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2020-11846

Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed