PT-2025-23005 · Opentext · Opentext Advance Authentication

Published 2025-05-27 · Updated 2025-05-27 · CVE-2025-2236

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Low

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions OpenText Advanced Authentication versions prior to 6.5

Description The issue allows exposure of sensitive system information to an unauthorized control sphere, potentially revealing sensitive information during the management and configuration of external services.

Recommendations For versions prior to 6.5, update to version 6.5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-2236

Affected Products

Opentext Advance Authentication

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-2236 · Security Note
• https://twitter.com/CVEnew/status/1927388588938866845 · Twitter Post
• https://portal.microfocus.com/s/article/KM000039947 · Note
• https://t.me/cvetracker/24735 · Telegram Post