{"id":"CVE-2025-2236","state":"PUBLISHED","title":"Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","publishedAt":"2025-05-27T15:00:30.910Z","updatedAt":"2025-05-27T15:17:27.699Z","severity":{"score":2.1,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red","source":"OpenText"},"assigner":"OpenText","products":["OpenText Advanced Authentication"],"affected":[{"vendor":"OpenText","product":"Advanced Authentication","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.5","versionType":"custom"}]}],"references":["https://portal.microfocus.com/s/article/KM000039947"],"weaknesses":["CWE-497"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2236.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2236","state":"PUBLISHED","datePublished":"2025-05-27T15:00:30.910Z","dateUpdated":"2025-05-27T15:17:27.699Z","assignerShortName":"OpenText","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2025-03-11T22:39:05.579Z"},"containers":{"cna":{"title":"Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.","descriptions":[{"lang":"en","value":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5."}],"affected":[{"vendor":"OpenText","product":"Advanced Authentication","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"6.5","versionType":"custom"}]}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000039947"}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"NOT_DEFINED","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","baseScore":2.1,"baseSeverity":"LOW","privilegesRequired":"NONE","providerUrgency":"RED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"CONCENTRATED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-497","description":"CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OpenText","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateUpdated":"2025-05-27T15:00:30.910Z"},"impacts":[{"capecId":"CAPEC-410","descriptions":[{"lang":"en","value":"CAPEC-410 Information Elicitation"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<a target=\"_blank\" rel=\"nofollow\" href=\"https://portal.microfocus.com/s/article/KM000039947\">https://portal.microfocus.com/s/article/KM000039947</a>\n\n\n\n<br>"}],"value":"https://portal.microfocus.com/s/article/KM000039947"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-27T15:17:23.180062Z","id":"CVE-2025-2236","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-27T15:17:27.699Z"}}]}}}