CVE-2024-10863 MEDIUM

CVE-2024-10863: Client-side audit exclusion vulnerability

Vendor Opentext
Product Secure Content Manager
Weakness CWE-778
Published November 22, 2024
Last update November 26, 2024
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before <24.4. End-users can potentially exploit the vulnerability to exclude audit trails from being recorded on the client side.

Key dates

02Disclosure timeline

November 22, 2024 CVE published
November 26, 2024 Record updated