Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2024-12111

Potential LDAP injection vulnerability in OpenText Privileged Access Manager

Description

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText Privileged Access Manager

Default version status: unaffected

  • 23.3(4.4); 24.3(4.5)affected

References