We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-3272

Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.



Description

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.

Reserved 2025-04-04 | Published 2025-05-07 | Updated 2025-05-07 | Assigner OpenText


MEDIUM: 6.7CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:L/U:Green

Problem types

CWE-863 Incorrect Authorization

Product status

Default status
unaffected

24.2
affected

24.4
affected

References

portal.microfocus.com/s/article/KM000040405

cve.org (CVE-2025-3272)

nvd.nist.gov (CVE-2025-3272)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-3272

Support options

Helpdesk Chat, Email, Knowledgebase