CVE-2020-11847 — Vulnerability in sshrelay in privileged access manager provides full system access.

CVE-2020-11847

Vulnerability in sshrelay in privileged access manager provides full system access. PUBLISHED

Description (CNA)

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.

Affected (CNA)

Vendor / product	Versions
OpenText / Privileged Access Manager	affected 3.7.0.1 before <

CWE

CWE-78

References

https://www.netiq.com/documentation/privileged-account-manager-37/npam_3701_releasenotes/data/npam_3701_releasenotes.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.