CVE-2025-3272 MEDIUM

CVE-2025-3272: Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.

Vendor Opentext™
Product Operations Bridge Manager
Weakness CWE-863 · Incorrect authorization
Published May 7, 2025
Last update May 7, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:L/U:Green

What the vulnerability does

01Description

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.

Key dates

02Disclosure timeline

May 7, 2025 CVE published
May 7, 2025 Record updated