OpenText product name changes coming to the community soon! Learn more.

Related Tips & Info
Wikis - Page

Security alert - CVE-2024-10863: Audit log vulnerability affects OpenText Secure Content Manager

Graeme Christieson
 
1 Likes

Security alert

 

Client-side audit exclusion vulnerability in OpenTextTm Secure Content Manager

 

Systems Affected:

OpenTextTm Secure Content Manager 24.3 and older versions

 

Details:

CVE-2024-10863: Audit log vulnerability affects OpenText Secure Content Manager

 

End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side.

 

Impact:

If users exploit the vulnerability, client-side events will not be captured in the central audit log.

For more details click here

Labels:

Support Tips/Knowledge Docs
Comment List
Parents Comment
  •   in reply to [Scotty] 😬 

    Feedback from CPE.

    Does client-side mean 'any client application' e.g. Web Client / Mobile App / Desktop?

                   No, this applies only to the CM Desktop application

     

    Does 'central audit log' mean both the Online and Offline Audit Log?

                    No, this is only for the Online Audit log

     

    Do we know a CVE rating, and is there going to be a hotfix or the only way to remediate the CVE is to apply the patch?

                    Yes, it scored 5.1(medium CVSS scoring), no hotfix will be provided, the only way is to apply patches.

    Regards

    Graeme Christieson

    Lead Technical Support Specialist

    Global Technical Support

    QLD, Australia

Children
Related
Recommended

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.