CVE-2024-11604: Insertion of Sensitive Information into Log File
Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11604?
CVE-2024-11604 is categorized with a medium severity due to the potential exposure of sensitive information.
How do I fix CVE-2024-11604?
To fix CVE-2024-11604, upgrade to a version of the OpenText IDM SCIM Driver that is not vulnerable, such as versions later than 1.1.0.0000.
What types of sensitive information can be accessed due to CVE-2024-11604?
CVE-2024-11604 allows authenticated local users to access sensitive information logged in the log files of the SCIM Driver.
Who is affected by CVE-2024-11604?
CVE-2024-11604 affects local authenticated users of the OpenText IDM SCIM Driver on Windows and Linux operating systems.
What should I do if I am using an affected version of OpenText IDM SCIM Driver regarding CVE-2024-11604?
If using an affected version of the OpenText IDM SCIM Driver, it is critical to immediately upgrade to a fixed version to mitigate the risk associated with CVE-2024-11604.