CVE-2022-35898

2023-05-0100:00:00

mitre

www.cve.org

opentext bizmanager

password change

vulnerability

cve-2022-35898

administrator account

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.

References

businessnetwork.opentext.com/b2b-gateway/

hackandpwn.com/disclosures/CVE-2022-35898.pdf