{"id":"CVE-2024-12111","aliases":["EUVD-2024-50604","GHSA-2884-62f5-6m65"],"status":"published","title":"Potential LDAP injection vulnerability in OpenText Privileged Access Manager","description":"In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00377,"percentile":0.32107,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2024-12-19T20:10:58Z","modified":"2026-06-17T06:59:04Z","products":[{"vendor":"opentext","product":"privileged access manager"}],"references":[{"url":"https://www.netiq.com/documentation/privileged-access-manager-45/npam_45_releasenotes/data/npam_45_releasenotes.html"},{"url":"https://www.netiq.com/documentation/privileged-account-manager-44/npam_44_releasenotes/data/npam_44_releasenotes.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12111"},{"url":"https://github.com/advisories/GHSA-2884-62f5-6m65"}],"sources":{"cve":[{"id":"CVE-2024-12111","title":"Potential LDAP injection vulnerability in OpenText Privileged Access Manager","description":"In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)","status":"published","published":"2024-12-19T20:10:58.346Z","modified":"2025-10-09T18:46:06.04Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:34:11.97482Z"}],"euvd":[{"id":"EUVD-2024-50604","description":"In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)","status":"published","published":"2024-12-19T20:10:58Z","modified":"2025-10-09T18:46:06Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:34.46826Z"}],"ghsa":[{"id":"GHSA-2884-62f5-6m65","title":"In a specific scenario a LDAP user can abuse the authentication process in OpenText Privileged...","description":"In a specific scenario a LDAP user can abuse the authentication process in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)","status":"published","published":"2024-12-19T21:31:10Z","modified":"2024-12-19T21:31:21Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:59:14.691333Z"}],"nvd":[{"id":"CVE-2024-12111","description":"In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)","status":"published","published":"2024-12-19T20:15:06.95Z","modified":"2026-06-17T06:59:04.2Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:10:40.507978Z"}]}}