CVE-2024-11923 MEDIUM

CVE-2024-11923: Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3

Vendor Fortra
Product Fortra Application Hub
Weakness CWE-532 · Sensitive info in logs
Published January 17, 2025
Last update January 22, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3

Key dates

02Disclosure timeline

January 17, 2025 CVE published
January 22, 2025 Record updated