6.7Medium
CVE-2025-3272Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.
Description
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.
Weakness (CWE):
CWE-863
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| OpenText™ | Operations Bridge Manager | 24.2, 24.4 |