Skip to content
Sign in
8.0 High

CVE-2024-12111 In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged…

Description

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

Affected products and versions

Product Affected versions Fixed in
Privileged Access Manager Versions not published

Other CVEs of Privileged Access Manager

The 3 CVEs of Privileged Access Manager →
CVE-2020-11847 SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash 8.2 High CVE-2020-11846 A vulnerability found in OpenText Privileged Access Manager that issues a token 8.7 High
Track this CVE