CVE-2024-12799 — Insufficiently Protected Credentials

CVE-2024-12799

Insufficiently Protected Credentials PUBLISHED

Description (CNA)

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects Identity Manager Advanced Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

Affected (CNA)

Vendor / product	Versions
OpenText / Identity Manager Advanced Edition	affected 4.8.0.0 through 4.8.7.0102; affected 4.9.0.0

CWE

CWE-522

References

https://portal.microfocus.com/s/article/KM000037455

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.