VULNERABILITY INTELLIGENCE

CVE-2020-11847

CVSS score8.2 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.

Weakness classification

  • security@opentext.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references