← Back to browse · API

CVE-2024-12799

Severity
CRITICAL
CVSS
10.0
EPSS
0.00373
Risk score
40.13
CISA KEV
No
PoC
No
Published
2025-03-05
Modified
2025-03-05
First seen
2026-08-07
Aliases
EUVD-2024-54005, GHSA-2MXM-3CXJ-6CMP
Products
Opentext:Identity Manager Advanced Edition 4.8.0.0 ≤4.8.7.0102, Opentext:Identity Manager Advanced Edition 4.9.0.0
Sources
euvd EUVD-2024-54005

Description

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects Identity Manager Advanced Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

References