8.7
High
CVE-2020-11846 A vulnerability found in OpenText Privileged Access Manager that issues a token
Description
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Privileged Access Manager 3.7 | 3.7.0.1 → latest | No fix stated |
| privileged_access_manager 3.7 | earliest → < 3.7.0.1 | 3.7.0.1 |