Skip to content
OpenAdvisories
High · 8.7 CVE-2020-11846 EUVD-2020-4186GHSA-982x-jhrm-q8mj

Improper handling of token allows access to restricted resource in Privileged Access Manager

Published Aug 21, 2024 · Updated Aug 21, 2024 · Assigned by OpenText

Description

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.

Affected products

VendorProductAffectedFixed
OpenText Privileged Access Manager 3.7.0.1 – < < <

References