2.1Low
CVE-2025-2236Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced Authentication versions before 6.5.
Weakness (CWE):
CWE-497
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| OpenText | Advanced Authentication | < 6.5 |