Potential information leakage resulting in unauthorized access
Priority LOW 28CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.
Summary
Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00279 20th percentileScored 2026-11-07
Fix Fixed NetIQ Directory and Resource Administrator (OpenText): <
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenText | NetIQ Directory and Resource Administrator | 10.0.2 to before <; 9.2.1 Patch 10. to before < | < | Patch available | CNA |
- NetIQ Directory and Resource Administrator VendorOpenText Affected 10.0.2 to before <; 9.2.1 Patch 10. to before < Fixed in < Patch available CNA
Remediation
- Fix · CNA NetIQ Directory and Resource Administrator (OpenText) Fixed in <
Timeline
- 2026-10-02 Threatist record created from CVE-2020-25836
- 2026-10-03 Alias added: GHSA-r86p-wqv3-xrr5
References
More OpenText vulnerabilities
- TI-2022-22711 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
- TI-2022-22712 A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1… CVSS 3.1HIGH 8.8
- TI-2022-22710 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
- TI-2022-22707 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
- TI-2022-22706 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
- TI-2022-22709 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 7.5
Sources
- CVE-2020-25836 · CVE Program
- CVE-2020-25836 · NVD
- FIRST EPSS
- GHSA-r86p-wqv3-xrr5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences