Password Manager Product Notification

This is a revision to the previous critical security notification sent out on August 25,2023.

A critical security vulnerability has been identified in Password Manager versions 5.11.1, 5.12 and 5.12.1 which may affect Password Manager in specific configurations. 

How does this affect me?

This vulnerability may allow an unauthorized person to gain access to systems in very specific scenarios.

Please Note the additional details: The vulnerability may allow an unauthorized person to gain access on any system that has the Secure Password Extension (SPE) installed.

Resolution

This issue has been resolved in Password Manager 5.11.2, 5.12.2 and 5.13. 

Please Note the additional details:  We recommend that customers fully upgrade all Password Manager components to 5.11.2, 5.12.2 or 5.13 including:

• Password Policy Manager

• Secure Password Extension

• Offline Password Reset