PT-2024-11540 · Opentext · Opentext Identity Manager Rest Driver

Published 2024-09-12 · Updated 2024-10-02 · CVE-2022-26322

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenText Identity Manager REST Driver versions prior to 1.1.2.0200

Description A vulnerability has been discovered in OpenText Identity Manager REST Driver, where sensitive information can be inserted into log files. This issue affects versions before 1.1.2.0200.

Recommendations For versions prior to 1.1.2.0200, upgrade to version 1.1.2.0200 or later to mitigate the risk of sensitive information exposure via log files.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2022-26322

Affected Products

Opentext Identity Manager Rest Driver

References · 7

• https://osv.dev/vulnerability/CVE-2022-26322 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26322 · Security Note
• https://netiq.com/documentation/identity-manager-48-drivers/RESTDriver1.1.2.0300_readme/data/RESTDriver1.1.2.0300_readme.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1834215110312624348 · Twitter Post
• https://t.me/cvedetector/5477 · Telegram Post
• https://twitter.com/oktsec/status/1834234072618377589 · Twitter Post
• https://t.me/cvenotify/96810 · Telegram Post