Login Request a demo
Critical severity · published Mar 5, 2025
CVE-2024-12799
Insufficiently Protected Credentials
10.0
CVSS
0.4%
EPSS
No
On KEV
Description
Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects Identity Manager Advanced Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Identity Manager Advanced Edition · OpenText
4.8.0.0 through 4.8.7.0102; 4.9.0.0 · source: vendor
Affected product
IM
Identity Manager Advanced Edition
OpenText
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12799
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12799
portal.microfocus.com
https://portal.microfocus.com/s/article/KM000037455