CVE-2022-26323 Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.
Authenticated attackers can elevate privileges in OpenText Operations Bridge Manager and UCMDB products due to incorrect use of privileged APIs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-26323?
CVE-2022-26323 is a high-severity vulnerability in OpenText™ Operations Bridge Manager, published on 17 Apr 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation.
The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UCMDB ( Classic and Containerized): through 2021.05.
Weakness: CWE-648
Which versions are affected by CVE-2022-26323?
How do I fix CVE-2022-26323?
No fix has been published for CVE-2022-26323 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-26323 being exploited?
There is no known exploitation of CVE-2022-26323 in the wild and no public exploit code.
Sources
Also known as GHSA-r734-gfr8-7qj8.