Skip to content
Sign in
8.2 High

CVE-2020-11847 SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash

Description

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.

Affected products and versions

Product Affected versions Fixed in
Privileged Access Manager 3.7 3.7.0.1 → latest No fix stated
privileged_access_manager 3.7 earliest → < 3.7.0.1 3.7.0.1

Other CVEs of Privileged Access Manager

The 3 CVEs of Privileged Access Manager →
CVE-2024-12111 In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged… 8.0 High CVE-2020-11846 A vulnerability found in OpenText Privileged Access Manager that issues a token 8.7 High
Track this CVE