CVE-2022-26322: Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-12 · updated 2026-06-17
Weakness: CWE-532

Description

Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. This impact version before 1.1.2.0200.

Affected products

OpenText Identity Manager REST Driver 1.1.2.0200: before 1.1.2.0200 — fixed in 1.1.2.0200

How to fix

Upgrade to a fixed version: OpenText Identity Manager REST Driver 1.1.2.0200 1.1.2.0200. Check the vendor advisory for mitigations.

References

https://www.netiq.com/documentation/identity-manager-48-drivers/RESTDriver1.1.2.0300_readme/data/RESTDriver1.1.2.0300_readme.html

Get alerted when CVE-2022-26322 or the next vulnerability affects your stack