CVE-2022-35898

creationtimestamp| type| source ---|---|--- 2023-05-02 00:29:40+00:00| seen| https://t.me/cibsecurity/63146...

CVE-2022-35898

CVE-2022-35898 affects OpenText BizManager prior to 16.6.0.1. The issue is a failure to validate during the change-password operation, enabling any authenticated user to change the password of any other user (including Administrator). This is described across multiple sources (e.g., Red Hat, CNVD...

CVE-2022-35898

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account...