Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-112256

Logon bypass (trust of attacker-controlled completed-methods list)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenText

Description

Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText Advanced Authentication Server

Default version status: unaffected

  • 6.4.0.0 to ≤ 6.4.3.8affected
  • 6.5.0.0 to ≤ 6.5.0.10affected
  • 6.6.0.0 to ≤ 6.6.1.0affected

References