CVE-2024-11604CWE-532

Insertion of Sensitive Information into Log File

High · published March 27, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/R:U/V:C/RE:M/U:Red
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-03-27T14:08Z
EPSS history
Timeline
  • 27 MAR 14:08Z
    Insertion of Sensitive Information into Log File
    cvelistv5