Information disclosure in Opentext Idm Driver And Extensions
CVE-2024-11604
Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.
EPSS: 0.001 (1.4th percentile) — read the EPSS interpretation.
Affected products
- Opentext Idm Driver And Extensions — versions 1.0.0.0000, 1.1.0.0000
Weakness classification (CWE)
References
- security@opentext.com (release-notes)
- security@opentext.com (release-notes)