Description (CNA)
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenText / Privileged Access Manager | affected 23.3(4.4); 24.3(4.5) |
CWE
CWE-77
References
- https://www.netiq.com/documentation/privileged-access-manager-45/npam_45_releasenotes/data/npam_45_releasenotes.html
- https://www.netiq.com/documentation/privileged-account-manager-44/npam_44_releasenotes/data/npam_44_releasenotes.html
ADP enrichment
No English description supplied.
No references supplied.