CVE-2020-11846CWE-269

Improper handling of token allows access to restricted resource in Privileged Access Manager

High · published August 21, 2024

CVSS v3.1
8.7
EPSS
0%
Percentile
24.6
In the wild
Unconfirmed
What it is

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-08-21T13:37Z
EPSS history
Timeline
  • 21 AUG 13:37Z
    Improper handling of token allows access to restricted resource in Privileged Access Manager
    cvelistv5