One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Password_manager | Oneidentity | 5.9.7.1 (including) | 5.11.2 (excluding) |
| Password_manager | Oneidentity | 5.12.0 (including) | 5.12.2 (excluding) |