PT-2025-20291 · Opentext · Opentext Operations Bridge Manager

Published 2025-05-07 · Updated 2025-05-20 · CVE-2025-3476

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:H/U:Red

Name of the Vulnerable Software and Affected Versions OpenText Operations Bridge Manager versions 2023.05, 23.4, 24.2, 24.4

Description The issue is related to an Incorrect Authorization vulnerability that could allow privilege escalation by authenticated users.

Recommendations For versions 2023.05, 23.4, 24.2, 24.4, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-3476

Affected Products

Opentext Operations Bridge Manager

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-3476 · Security Note
• https://twitter.com/CVEnew/status/1920246391307198922 · Twitter Post
• https://twitter.com/cybercronai/status/1920590874725003607 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1920344432626258222 · Twitter Post
• https://twitter.com/fletch_ai/status/1924721883385299013 · Twitter Post
• https://twitter.com/threatsbank/status/1920886856561934475 · Twitter Post
• https://portal.microfocus.com/s/article/KM000040406?language=en_US · Note
• https://t.me/cvetracker/23294 · Telegram Post
• https://twitter.com/cybercronai/status/1920504088430620895 · Twitter Post
• https://t.me/cvedetector/24757 · Telegram Post