Microfocus Netiq Privileged Access Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Microfocus Netiq Privileged Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2020-11846microfocusnetiq_privileged_access_manager+1
EPSS score
0.33%
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.8.2CVE-2020-11847microfocusnetiq_privileged_access_manager+1
EPSS score
0.31%
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.