CVE-2025-2236CWE-497

Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

Low · published May 27, 2025

CVSS v4.0
2.1
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.

This issue affects Advanced Authentication versions before 6.5.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-05-27T15:00Z
EPSS history
Timeline
  • 27 MAY 15:00Z
    Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.
    cvelistv5