Wikis - Page

Knowledge Document: Security Vulnerability CVE-2024-12799 - Insufficiently Protected Credentials

Caroline Oest OpenText Employee

0 Likes

24 days ago

An Insufficiently Protected Credentials vulnerability has been discovered in OpenText Identity Manager Advanced Edition 4.8.5.0. The issue affects Identity Manager Advanced Edition versions till 4.9.0.0. CVE reference CVE-2024-12799

Summary

A vulnerability that can expose Insufficiently Protected Credentials has been discovered in OpenText Identity Manager Advanced Edition 4.8.5.0. The issue has been reported as CVE-2024-12799

Systems affected:

IDM Advanced Edition

Identity Manager 4.8.x

Identity Manager 4.9

Impact

This vulnerability allows an authenticated user to obtain higher privileged user’s sensitive information via a crafted payload. This allows the Insufficiently Protected Credentials vulnerability to occur.

See full knowledge document on support portal

Tags:

Identity Manager

Identity management

IDM

Labels:

Support Tips/Knowledge Docs

Comment List

Geoffrey Carman 24 days ago

For 4.9 and 48.7 this is a simple drop in a file.

For 4.8.6 and earlier versions, they expect you to extract a jar, modify a file, and re-jar the file.

The curious question is why not provide older pre-built files as well? I get not supported, but for security patches, seems like they might want to.
- Cancel
- Vote Up 0 Vote Down
- Sign in to reply
- More
- Cancel

Recommended

Menu

Identity Manager Tips