Description
Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3
Published: 2025-01-17
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to Fortra Application Hub 1.3 or higher.

Vendor Workaround

Avoid using "trace" logging levels in Fortra Application Hub

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-34408 Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3
History

Wed, 22 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 18 Jan 2025 00:00:00 +0000

Type Values Removed Values Added
Description Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3
Title Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3
Weaknesses CWE-532
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Fortra

Published:

Updated: 2025-01-22T14:25:10.620Z

Reserved: 2024-11-27T18:20:21.571Z

Link: CVE-2024-11923

cve-icon Vulnrichment

Updated: 2025-01-22T14:23:42.428Z

cve-icon NVD

Status : Received

Published: 2025-01-18T00:15:25.823

Modified: 2025-01-18T00:15:25.823

Link: CVE-2024-11923

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses