OpenText Operations Bridge Manager Incorrect Authorization Vulnerability Allowing Password Changes

An incorrect authorization vulnerability has been identified in OpenText Operations Bridge Manager versions 24.2 and 24.4. This vulnerability allows authenticated users to change their passwords without having to provide their previous password. The issue is present in both Windows and Linux operating systems.

Impact

Exploitation of this vulnerability could lead to unauthorized password changes, potentially allowing users to gain access to accounts they do not own.

Remediation

Users are advised to upgrade to OpenText Operations Bridge Manager version 25.2 or later. If upgrading is not possible, a hotfix is available by contacting OpenText support.