CVE-2025-2236

Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

CVSS 2.1 LOWEPSS 0.2%CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced Authentication versions before 6.5.

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red

Produtos afetados

OpenText · Advanced Authentication

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://portal.microfocus.com/s/article/KM000039947