CVE-2024-11923

Published: Jan 18, 2025Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff (Secondary)

Description

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.fortra.com/security/advisories/product-security/fi-2025-003

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff

Timeline

No history available yet.