One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges.
| Software | From | Fixed in |
|---|---|---|
| oneidentity / password_manager | 5.12.0 | 5.12.2 |
| oneidentity / password_manager | 5.9.7.1 | 5.11.2 |