2.1Low

CVE-2025-2236Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

OpenText Advanced Authentication Published: (1 year ago)

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced Authentication versions before 6.5.

Weakness (CWE): CWE-497

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
OpenText Advanced Authentication < 6.5

References and patches