Lucene search
HistoryAug 21, 2024 - 2:15 p.m.
CVE-2020-11846
opentext
privileged access manager
vulnerability
token
cookie
unrestricted access
application resources
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
Affected configurations
Node
microfocusnetiq_privileged_access_managerRange<3.7
ORmicrofocusnetiq_privileged_access_managerMatch3.7-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microfocus | netiq_privileged_access_manager | * | cpe:2.3:a:microfocus:netiq_privileged_access_manager:*:*:*:*:*:*:*:* |
| microfocus | netiq_privileged_access_manager | 3.7 | cpe:2.3:a:microfocus:netiq_privileged_access_manager:3.7:-:*:*:*:*:*:* |
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
Related for NVD:CVE-2020-11846