Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IDM-Driver-and-Extensions

Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000.

CVE-2024-11604 identifies a vulnerability classified under CWE-532 (Insertion of Sensitive Information into Log File) in the SCIM Driver module of OpenText IDM Driver and Extensions. The affected versions are 1.0.0.0000 through 1.0.1.0300 and 1.1.0.0000, running on Windows and Linux 64-bit platforms. The vulnerability arises because the software improperly logs sensitive information, which can be accessed by authenticated local users with high privileges. This exposure can lead to unauthorized disclosure of sensitive data, potentially including credentials or personally identifiable information, depending on what is logged. The CVSS 4.0 base score is 7.3, indicating a high severity level. The attack vector is local (AV:L), requiring low attack complexity (AC:L) but privileged access (PR:H) and user interaction (UI:A). The vulnerability impacts confidentiality, integrity, and availability with high scope and impact metrics. Although no exploits are currently known in the wild, the risk is significant due to the sensitive nature of the data exposed and the privileged access required to exploit it. The vulnerability is particularly relevant for organizations using OpenText IDM for identity and access management, where log files may contain sensitive operational or user data.

Detailed information about CVE-2024-11604: CWE-532 Insertion of Sensitive Information into Log File in OpenText IDM Driver and Extensions affecting OpenText IDM

CVE-2024-11604: CWE-532 Insertion of Sensitive Information into Log File in OpenText IDM Driver and Extensions - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-11604: CWE-532 Insertion of Sensitive Information into Log File in OpenText IDM Driver and Extensions

Threats Tagged 'cve-2024-11604'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-11604'

Lead Pen Test Professional