Skip to content
OpenAdvisories

Product · OpenText

Privileged Access Manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.0
    CVE-2024-12111

    Potential LDAP injection vulnerability in OpenText Privileged Access Manager

    In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

    OpenText Privileged Access Manager
  • High 8.2
    CVE-2020-11847

    Vulnerability in sshrelay in privileged access manager provides full system access.

    SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.

    OpenText Privileged Access Manager
  • High 8.7
    CVE-2020-11846

    Improper handling of token allows access to restricted resource in Privileged Access Manager

    A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0…

    OpenText Privileged Access Manager