{"id":"CVE-2025-2236","aliases":["EUVD-2025-27697","GHSA-pfhv-4q3r-34jw"],"status":"published","title":"Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","severity":{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00183,"percentile":0.07924,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-497"],"published":"2025-05-27T15:00:30Z","modified":"2026-06-17T09:06:35Z","products":[{"vendor":"opentext","product":"advanced authentication"}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000039947"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2236"},{"url":"https://github.com/advisories/GHSA-pfhv-4q3r-34jw"}],"sources":{"cve":[{"id":"CVE-2025-2236","title":"Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","status":"published","published":"2025-05-27T15:00:30.91Z","modified":"2025-05-27T15:17:27.699Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red","level":"low","assessor":"cna"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T14:32:38.70481Z"}],"euvd":[{"id":"EUVD-2025-27697","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","status":"published","published":"2025-05-27T15:00:30Z","modified":"2025-05-27T15:17:27Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:P/AU:N/V:C/RE:M/U:Red","level":"low"}],"updated_at":"2026-11-02T20:32:38.348652Z"}],"ghsa":[{"id":"GHSA-pfhv-4q3r-34jw","title":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","status":"published","published":"2025-05-27T15:31:28Z","modified":"2025-05-27T15:31:33Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:M/U:Red","level":"low"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T15:02:26.855176Z"}],"nvd":[{"id":"CVE-2025-2236","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.\n\nThis issue affects Advanced Authentication versions before 6.5.","status":"published","published":"2025-05-27T15:15:32.223Z","modified":"2026-06-17T09:06:35.817Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:M/U:Red","level":"low","assessor":"secondary"}],"cwes":["CWE-497"],"updated_at":"2026-11-02T14:11:09.562272Z"}]}}