Design/Logic Flaw

2023-05-0120:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

validation

change password

unauthorized access

opentext bizmanager

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.

CPENameOperatorVersion
bizmanagerlt16.6.0.1

CPE	Name	Operator	Version
	bizmanager	lt	16.6.0.1

References

businessnetwork.opentext.com/b2b-gateway/

hackandpwn.com/disclosures/CVE-2022-35898.pdf