CVE-2024-11923

MEDIUM

Fortra Application Hub <1.3 - Info Disclosure

Title source: llm

Description

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Formerly named Helpsystems One) prior to version 1.3

References (1)

Core 1

Core References

Vendor Advisory

https://www.fortra.com/security/advisories/product-security/fi-2025-003

Scores

CVSS v3 5.5

EPSS 0.0020

EPSS Percentile 10.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (1)

Fortra/Fortra Application Hub 1.0 - 1.2

Published Jan 18, 2025

Tracked Since Feb 18, 2026