Critical · published May 1, 2023
🚨 A malicious user can change any password with this serious flaw lurking in OpenText BizManager! 🔥 Think of it as a hotel where any guest can walk up to the front desk and change the room key for any other guest, including the VIP suite! How wild is that? This vulnerability is absolutely devastating: an attacker could gain control over any account, including the Administrator's, leading to unauthorized access, data breaches, or even total system compromise! Imagine the chaos they could unleash!
Think of it as a hotel where any guest can walk up to the front desk and change the room key for any other guest, including the VIP suite! How wild is that? The flaw lies in the change-password operation, where the system fails to validate whether a user is authorized to change another user's password, creating a gaping hole in user management security.
This vulnerability is absolutely devastating: an attacker could gain control over any account, including the Administrator's, leading to unauthorized access, data breaches, or even total system compromise! Imagine the chaos they could unleash! Upgrade OpenText BizManager to version 16.6.0.1 or later immediately to patch this vulnerability. It's also wise to review user permissions and audit accounts for any unusual activity. Don't wait, secure your system now! You've got this! Follow these steps and safeguard your environment like a pro! 🛡️