PT-2024-10882 · Opentext · Opentext Identity Manager Azuread Driver

Published 2024-09-12 · Updated 2024-10-02 · CVE-2021-22518

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenText Identity Manager AzureAD Driver versions prior to 5.1.4.0

Description A vulnerability has been identified in OpenText Identity Manager AzureAD Driver, allowing the logging of sensitive information into a log file.

Recommendations For versions prior to 5.1.4.0, update to version 5.1.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of sensitive information exposure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2021-22518

Affected Products

Opentext Identity Manager Azuread Driver

References · 6

• https://netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22518 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22518 · Vendor Advisory
• https://t.me/cvenotify/96800 · Telegram Post
• https://t.me/cvenotify/94412 · Telegram Post
• https://twitter.com/CVEnew/status/1834215102976807388 · Twitter Post