This vulnerability involves improper use of privileged APIs in OpenText Access Manager, allowing unauthorized users to modify configuration via API calls. It affects Access Manager version 5.1. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and low impact on confidentiality and integrity, with limited availability impact. There is no vendor advisory or patch information available at this time.

An unauthorized attacker can modify configuration settings in OpenText Access Manager 5.1 through API calls, potentially leading to unauthorized changes in system behavior or security posture. The impact is rated medium severity with limited confidentiality, integrity, and availability impact as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, organizations should monitor OpenText advisories for updates. Until a patch is available, restrict access to the affected API endpoints and enforce strict access controls to mitigate unauthorized configuration changes.