Read the docs
TI-2024-10751 Aliases CVE-2024-11604GHSA-cvjj-fxm4-8q63

Sensitive information in log files in OpenText IDM Driver and Extensions

Priority LOW 33CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-532.

Summary

Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00113 1st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenTextIDM Driver and Extensions1.0.0.0000 – 1.0.1.0300; 1.1.0.0000 and later—No fix listedCNA
  • IDM Driver and Extensions VendorOpenText Affected 1.0.0.0000 – 1.0.1.0300; 1.1.0.0000 and later Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-11604
  2. 2026-10-03 Alias added: GHSA-cvjj-fxm4-8q63

References

Other 2

  • TI-2022-22711 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
  • TI-2022-22712 A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1… CVSS 3.1HIGH 8.8
  • TI-2022-22710 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
  • TI-2022-22707 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
  • TI-2022-22706 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 8.8
  • TI-2022-22709 An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). CVSS 3.1HIGH 7.5
See all 252 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences