What’s Vulnerable › Vulnerabilities

CVE-2020-25836: Potential information leakage resulting in unauthorized access

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-16 · updated 2026-06-17
• Weakness: CWE-200

Description

Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.

Affected products

• OpenText NetIQ Directory and Resource Administrator: from 10.0.2 before <; from 9.2.1 Patch 10. before < — fixed in <

How to fix

Upgrade to a fixed version: OpenText NetIQ Directory and Resource Administrator <. Check the vendor advisory for mitigations.

References

• https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv
• https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv

Get alerted when CVE-2020-25836 or the next vulnerability affects your stack