CVE-2025-2236

Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

State: Published
Severity: 2.1 Low
Published: May 27, 2025
Updated: May 27, 2025
Reserved: Mar 11, 2025

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.

This issue affects Advanced Authentication versions before 6.5.

Scores

CVSS	Score	Vector	Source
4.0	2.1 Low	CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red	OpenText

Weaknesses

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected Products

Product	Versions
Advanced AuthenticationOpenText	before 6.5Affected

References

https://portal.microfocus.com/s/article/KM000039947

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.