CVE-2020-11847
Vulnerability in sshrelay in privileged access manager provides full system access.
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Aug 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
OpenText · Privileged Access ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →