A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netiq_privileged_access_manager | Microfocus | * | 3.7 (excluding) |
| Netiq_privileged_access_manager | Microfocus | 3.7 (including) | 3.7 (including) |