CVE-2020-11843 : This allows the information exposure to unauthorized users. This issue affects

This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before

Published 2024-06-11 08:15:48

Updated 2024-08-23 15:48:39

Source OpenText

View at NVD, CVE.org

Products affected by CVE-2020-11843

Netiq » Access Manager
Versions before (<) 4.4
cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*
Matching versions
Netiq » Access Manager
Versions up to, including, (<=) 4.5
cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4
cpe:2.3:a:netiq:access_manager:4.4:-:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4 Update Hotfix1
cpe:2.3:a:netiq:access_manager:4.4:hotfix1:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4 Update SP1
cpe:2.3:a:netiq:access_manager:4.4:sp1:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4 Update SP2
cpe:2.3:a:netiq:access_manager:4.4:sp2:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4 Update SP3
cpe:2.3:a:netiq:access_manager:4.4:sp3:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.4 Update SP4
cpe:2.3:a:netiq:access_manager:4.4:sp4:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.5
cpe:2.3:a:netiq:access_manager:4.5:-:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.5 Update SP1
cpe:2.3:a:netiq:access_manager:4.5:sp1:*:*:*:*:*:*
Matching versions
Netiq » Access Manager » Version: 4.5 Update SP2
cpe:2.3:a:netiq:access_manager:4.5:sp2:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	2.8	3.6	NIST	2024-08-23
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: None
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	2.8	3.6	OpenText	2024-06-11
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: security@opentext.com (Secondary)

Jump to