CVE-2021-22518

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-22518
A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all versions before 5.1.4.0

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:opentext:identity_manager_azuread_driver:*:*:*:*:*:*:*:*
History

02 Oct 2024, 15:10

Type Values Removed Values Added
References () https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html - Third Party Advisory () https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html - Vendor Advisory

02 Oct 2024, 13:49

Type Values Removed Values Added
Summary
  • (es) Se identificó una vulnerabilidad en el controlador AzureAD de OpenText™ Identity Manager que permite registrar información confidencial en un archivo de registro. Esto afecta a todas las versiones anteriores a la 5.1.4.0
First Time Opentext
Opentext identity Manager Azuread Driver
References () https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html - () https://www.netiq.com/documentation/identity-manager-48-drivers/AzureADDriver514/data/AzureADDriver514.html - Third Party Advisory
CVSS v2 : unknown
v3 : 5.8 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:opentext:identity_manager_azuread_driver:*:*:*:*:*:*:*:*

12 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-12 13:15

Updated : 2024-10-02 15:10

NVD link : CVE-2021-22518

Mitre link : CVE-2021-22518

CVE.ORG link : CVE-2021-22518

JSON object : View

Products Affected

opentext

  • identity_manager_azuread_driver
CWE
CWE-532

Insertion of Sensitive Information into Log File