Approved changes feed: RSS · Atom

cpe:2.3:a:microfocus:netiq_privileged_access_manager:3.7:-:*:*:*:*:*:*

part: a version: 3.7 update: -

VendorMicrofocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3)
ProductNetiq Privileged Access Manager (0039b96c-421a-55ee-b71f-e34d180dd4a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11847 vulnerable 2026-06-08 05:17:54.976130 Vulnerability in sshrelay in privileged access manager provides full system access.
HIGH (8.2)
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.
Published: 2024-08-21T13:38:44.228Z
Updated: 2024-08-22T13:50:29.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11846 vulnerable 2026-06-08 05:17:54.975623 Improper handling of token allows access to restricted resource in Privileged Access Manager
HIGH (8.7)
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
Published: 2024-08-21T13:37:11.454Z
Updated: 2024-08-21T14:40:15.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.