Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-12799 EUVD-2024-54005GHSA-2mxm-3cxj-6cmp

Insufficiently Protected Credentials

Published Mar 5, 2025 · Updated Mar 5, 2025 · Assigned by OpenText

Description

Insufficiently Protected Credentials
vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,
64 bit allows Privilege Abuse. This vulnerability could allow an
authenticated user to obtain higher privileged user’s sensitive information via
crafted payload.

This issue affects Identity Manager Advanced
Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

Affected products

VendorProductAffectedFixed
OpenText Identity Manager Advanced Edition 4.8.0.0 – ≤ 4.8.7.0102, 4.9.0.0 —

References