High severity · published Mar 27, 2026
CVE-2024-11604
Insertion of Sensitive Information into Log File
7.3
CVSS
0.1%
EPSS
No
On KEV
Description
Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
IDM Driver and Extensions · OpenText
1.0.0.0000 through 1.0.1.0300; 1.1.0.0000 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-11604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-11604
www.netiq.com
https://www.netiq.com/documentation/identity-manager-48-drivers/SCIMDriver1.0.1.0400_readme/data/SCIMDriver1.0.1.0400_readme.html
www.netiq.com
https://www.netiq.com/documentation/identity-manager-49-drivers/SCIMDriver1.1.0.0100_readme/data/SCIMDriver1.1.0.0100_readme.html