{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.1",
    "cveMetadata": {
        "cveId": "CVE-2020-25836",
        "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "state": "PUBLISHED",
        "assignerShortName": "OpenText",
        "dateReserved": "2020-09-23T00:00:00.000Z",
        "datePublished": "2024-07-16T21:21:27.986Z",
        "dateUpdated": "2024-08-04T15:40:37.000Z"
    },
    "containers": {
        "cna": {
            "affected": [
                {
                    "defaultStatus": "unaffected",
                    "product": "NetIQ Directory and Resource Administrator",
                    "vendor": "OpenText",
                    "versions": [
                        {
                            "lessThan": "<",
                            "status": "affected",
                            "version": "10.0.2",
                            "versionType": "custom"
                        },
                        {
                            "lessThan": "<",
                            "status": "affected",
                            "version": "9.2.1 Patch 10.",
                            "versionType": "custom"
                        }
                    ]
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "supportingMedia": [
                        {
                            "base64": false,
                            "type": "text/html",
                            "value": "<p>Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.</p>\n\n\n\n\n\n"
                        }
                    ],
                    "value": "Exposure of Sensitive Information\nto an Unauthorized Access vulnerability in OpenText NetIQ Directory and\nResource Administrator. This issue affects NetIQ Directory and Resource\nAdministrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10."
                }
            ],
            "impacts": [
                {
                    "capecId": "CAPEC-410",
                    "descriptions": [
                        {
                            "lang": "en",
                            "value": "CAPEC-410 Information Elicitation"
                        }
                    ]
                }
            ],
            "metrics": [
                {
                    "cvssV3_1": {
                        "attackComplexity": "LOW",
                        "attackVector": "NETWORK",
                        "availabilityImpact": "LOW",
                        "baseScore": 6.3,
                        "baseSeverity": "MEDIUM",
                        "confidentialityImpact": "LOW",
                        "integrityImpact": "LOW",
                        "privilegesRequired": "LOW",
                        "scope": "UNCHANGED",
                        "userInteraction": "NONE",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                        "version": "3.1"
                    },
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ]
                }
            ],
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "cweId": "CWE-200",
                            "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                            "lang": "en",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "providerMetadata": {
                "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
                "shortName": "OpenText",
                "dateUpdated": "2024-07-16T21:21:27.986Z"
            },
            "references": [
                {
                    "url": "https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "title": "Potential information leakage resulting in unauthorized access",
            "x_generator": {
                "engine": "Vulnogram 0.2.0"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2024-07-16T21:38:10.498793Z",
                                "id": "CVE-2020-25836",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2024-07-16T21:38:15.638Z"
                }
            },
            {
                "providerMetadata": {
                    "orgId": "af854a3a-2127-422b-91ae-364da2661108",
                    "shortName": "CVE",
                    "dateUpdated": "2024-08-04T15:40:37.000Z"
                },
                "title": "CVE Program Container",
                "references": [
                    {
                        "url": "https://www.netiq.com/documentation/directory-and-resource-administrator-10/releasenotes_10.0.2/data/releasenotes_10.0.2.html#b149h4pv",
                        "tags": [
                            "x_transferred"
                        ]
                    }
                ]
            }
        ]
    }
}