CVE-2025-2236
Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 2.1EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
27 may 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.
This issue affects Advanced Authentication versions before 6.5.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red
Productos afectados
OpenText · Advanced Authentication¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →