High severity8.2NVD Advisory· Published Aug 21, 2024· Updated Jun 17, 2026

CVE-2020-11847

Description

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microfocus/Netiq Privileged Access Manager2 versions
cpe:2.3:a:microfocus:netiq_privileged_access_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microfocus:netiq_privileged_access_manager:*:*:*:*:*:*:*:*range: <3.7
- cpe:2.3:a:microfocus:netiq_privileged_access_manager:3.7:-:*:*:*:*:*:*
Microfocus/Privileged Access Managerllm-create
Range: <3.7.0.1
Opentext/Netiq Privileged Account Managercpe-rescue
Range: 3.7.0.1

Patches

Vulnerability mechanics

References

www.netiq.com/documentation/privileged-account-manager-37/npam_3701_releasenotes/data/npam_3701_releasenotes.htmlnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000