CVE-2020-25836

MEDIUM

OpenText NetIQ Directory and Resource Administrator <10.0.2, <9.2.1...

Title source: llm

Description

Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.

References (1)

Core 1

Core References

Various Sources

https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv

Scores

CVSS v3 6.3

EPSS 0.0028

EPSS Percentile 19.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (2)

OpenText/NetIQ Directory and Resource Administrator 10.0.2 - <

OpenText/NetIQ Directory and Resource Administrator 9.2.1 Patch 10. - <

Published Jul 16, 2024

Tracked Since Feb 18, 2026