CVE-2025-10698: Improper File Permissions on Private Key Files in Docker Deployments
Published Nov 12, 2026
·Updated
Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data.
This issue affects Identity Console: from 1.8 through 25.2.
Event History
Nov 12, 2026
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
OpenText Identity Console deployments on Windows, Linux, and 64-bit systems are affected in versions from 1.8 through 25.2.
2
What sensitive material could be exposed?
The issue involves improper permissions on private key files in Docker deployments and may allow retrieval of embedded sensitive data.