CVE-2024-12799

Vulnerability Description

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects Identity Manager Advanced Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

Related Weaknesses (CWE)

CWE-522

References

https://portal.microfocus.com/s/article/KM000037455

FAQ

What is CVE-2024-12799?

CVE-2024-12799 is a documented vulnerability. Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user ...

How severe is CVE-2024-12799?

CVSS scoring is not yet available for CVE-2024-12799. Check NVD for updates.

Is there a patch for CVE-2024-12799?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.