CVE-2024-11923CWE-532

Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3

Medium · published January 17, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-01-17T23:44Z
EPSS history
Timeline
  • 17 JAN 23:44Z
    Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3
    cvelistv5