CVE-2025-8616: Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication
A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8616?
CVE-2025-8616 is categorized as a high-severity vulnerability due to its potential to bypass user authentication.
How do I fix CVE-2025-8616?
To fix CVE-2025-8616, update OpenText Advanced Authentication to version 6.5.1 or later.
What software versions are affected by CVE-2025-8616?
CVE-2025-8616 affects OpenText Advanced Authentication versions up to and including 6.5.0.
What type of attack is associated with CVE-2025-8616?
CVE-2025-8616 is associated with an attack where a malicious browser plugin can record and replay authentication processes.
Is user data at risk due to CVE-2025-8616?
Yes, CVE-2025-8616 poses a risk to user data because it allows unauthorized access by bypassing authentication.