2301 matches found
CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...
CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...
CVE-2024-12111
CVE-2024-12111 describes an LDAP injection vulnerability in OpenText Privileged Access Manager that can lead to authentication bypass. Affected products: OpenText Privileged Access Manager; affected versions: 23.3(4.4) and 24.3(4.5). Root cause: LDAP authentication path injection; impact: authent...
CVE-2021-22501
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05,...
CVE-2021-22501
OpenText Operations Bridge Manager is affected by CVE-2021-22501 due to an Improper Restriction of XML External Entity References. The vulnerability affects OpBridge Manager versions 2017.05 through 2020.10 and can lead to Input Data Manipulation with potential disclosure of confidential informat...
CVE-2021-22501
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05,...
CVE-2021-22501
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05,...
CVE-2024-12111: Improper Neutralization of Special Elements used in a Command
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...
CVE-2021-22501: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05,...
OpenText Privileged Access Manager 安全漏洞
OpenText Privileged Access Manager is a privileged access management software from OpenText Canada. A security vulnerability exists in OpenText Privileged Access Manager versions 23.3 4.4 and 24.3 4.5. An attacker could bypass authentication by exploiting the vulnerability...
PT-2024-17446
Name of the Vulnerable Software and Affected Versions OpenText Privileged Access Manager versions 23.34.4 through 24.34.5 Description In a specific scenario, a LDAP user can abuse the authentication process in OpenText Privileged Access Manager, allowing authentication bypass. Recommendations For...
PT-2024-9971 · Opentext · Opentext Operations Bridge Manager
Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 2017.05 through 2020.10 Description: The issue is related to an Improper Restriction of XML External Entity Reference, which could allow for Input Data Manipulation. This could be exploited to gain...
CVE-2019-17082
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...
CVE-2019-17082
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...
CVE-2019-17082
OpenText AccuRev (Linux/Solaris) is affected by CVE-2019-17082, an Insufficiently Protected Credentials vulnerability that allows authentication bypass. The issue enables login without a password for users with a valid AccuRev username, affecting AccuRev 2017.1. CVSS 4.0 base score is 9.0 (CRITIC...
OpenText AccuRev 安全漏洞
OpenText AccuRev is a software configuration management tool from OpenText Canada that handles complex parallel and distributed development environments through its stream-based architecture to speed up the development process and increase asset reuse. A security vulnerability exists in OpenText...
PT-2024-10724
Name of the Vulnerable Software and Affected Versions OpenText AccuRev version 2017.1 Description The issue allows authentication bypass, enabling anyone with knowledge of a valid AccuRev username to gain access to AccuRev source control without knowing the user's password. This can occur when th...
CVE-2019-17082: Insufficiently Protected Credentials
Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...
CVE-2024-10863
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before 24.4. End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side...
