CVE-2024-4556

CV E-2024-4556 (NetIQ Access Manager) shows a Path Traversal vulnerability in OpenText NetIQ Access Manager. The issue allows access to sensitive information by improper limitation of a pathname to restricted directories. Affected product: OpenText NetIQ Access Manager before 5.0.4 and before 5.1...

OpenText NetIQ Access Manager 安全漏洞

OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A security vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from an improper privilege management vulnerability that allows user account...

OpenText NetIQ Access Manager 安全漏洞

OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A security vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from a path traversal vulnerability that fails to properly restrict pathname...

OpenText NetIQ Access Manager 跨站脚本漏洞

OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A cross-site scripting vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from improper input validation and could lead to cross-site...

PT-2024-31688 · Opentext · Opentext Netiq Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4 OpenText NetIQ Access Manager versions prior to 5.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal...

PT-2024-31686 · Opentext · Opentext Netiq Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 and 5.1 Description: The issue is caused by an improper input validation flaw in OpenText NetIQ Access Manager, leading to a Cross-Site Scripting XSS attack. Recommendations: For version...

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11847

CVE-2020-11847 affects OpenText NetIQ Privileged Account Manager (PAM) prior to 3.7.0.1. An SSH-authenticated user can access the PAM server and run an OS command via bash to obtain full system access. The root cause is exposure of command execution during SSH access to the PAM server, as describ...

CVE-2020-11846 Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846 Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846

OpenText Privileged Access Manager before 3.7.0.1 is affected by CVE-2020-11846. The issue arises from the Token Handler, where issuing a token also sets a cookie that grants unrestricted access to all application resources. This represents improper privilege management and can enable remote expl...

PT-2024-10765 · Opentext · Opentext Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText Privileged Access Manager versions prior to 3.7.0.1 Description: A vulnerability found in OpenText Privileged Access Manager issues a token, and on successful issuance of the token, a cookie gets set that allows unrestricted access t...

PT-2024-10766 · Unknown · Ca Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: Privileged Access Manager versions prior to 3.7.0.1 Description: The issue allows an SSH authenticated user to execute an OS command and gain full system access using bash when accessing the PAM server. Recommendations: For versions prior to...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Oracle Access Manager (Jul 2024 CPU)

The 12.2.1.4.0 versions of Access Manager installed on the remote host are affected by a vulnerability as referenced in the July 2024 CPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Third Party Apache HttpClient. The supported version that...

SolarWinds Access Rights Manager createGlobalServerChannelInternal Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the createGlobalServerChannelInternal method. The issue results from th...