CVE-2025-3272CWE-863

Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.

Medium · published May 7, 2025

CVSS v4.0
6.7
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.

The vulnerability could allow authenticated users to change their password without providing their old password.

This issue affects Operations Bridge Manager: 24.2, 24.4.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:L/U:Green
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-05-07T18:42Z
EPSS history
Timeline
  • 07 MAY 18:42Z
    Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.
    cvelistv5