{"id":"CVE-2020-25836","aliases":["EUVD-2020-18469","GHSA-r86p-wqv3-xrr5"],"status":"published","title":"Potential information leakage resulting in unauthorized access","description":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00279,"percentile":0.20525,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2024-07-16T21:21:27Z","modified":"2026-06-17T03:07:22Z","products":[{"vendor":"opentext","product":"netiq directory and resource administrator"}],"references":[{"url":"https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25836"},{"url":"https://github.com/advisories/GHSA-r86p-wqv3-xrr5"}],"sources":{"cve":[{"id":"CVE-2020-25836","title":"Potential information leakage resulting in unauthorized access","description":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.","status":"published","published":"2024-07-16T21:21:27.986Z","modified":"2024-08-04T15:40:37Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18469","description":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.","status":"published","published":"2024-07-16T21:21:27Z","modified":"2024-08-04T15:40:37Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:07:16.308974Z"}],"ghsa":[{"id":"GHSA-r86p-wqv3-xrr5","title":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ...","description":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.","status":"published","published":"2024-07-17T00:32:52Z","modified":"2024-07-17T00:33:01Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:57:42.487659Z"}],"nvd":[{"id":"CVE-2020-25836","description":"Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.","status":"published","published":"2024-07-16T22:15:02.773Z","modified":"2026-06-17T03:07:22.17Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:47.910346Z"}]}}