Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-11846

Improper handling of token allows access to restricted resource in Privileged Access Manager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenText

Description

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText Privileged Access Manager

Default version status: unaffected

  • 3.7.0.1 to < <affected

References