CVE-2024-10863CWE-778

Client-side audit exclusion vulnerability

Medium · published November 22, 2024

CVSS v4.0
5.1
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before <24.4.

End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-778 · Insufficient Logging
Published
2024-11-22T15:36Z
EPSS history
Timeline
  • 22 NOV 15:36Z
    Client-side audit exclusion vulnerability
    cvelistv5