CVE-2024-12799CWE-522

Insufficiently Protected Credentials

Critical · published March 5, 2025

CVSS v4.0
10.0
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

Insufficiently Protected Credentials

vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,

64 bit allows Privilege Abuse. This vulnerability could allow an

authenticated user to obtain higher privileged user’s sensitive information via

crafted payload.

This issue affects Identity Manager Advanced

Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:C/RE:H/U:Red
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2025-03-05T14:55Z
EPSS history
Timeline
  • 05 MAR 14:55Z
    Insufficiently Protected Credentials
    cvelistv5