{"affected":[{"defaultStatus":"unknown","platforms":["Windows","Linux","64 bit"],"product":"Identity Console","source":"CNA: OpenText","vendor":"OpenText","versions":[{"changes":[{"at":"25.2","status":"unaffected"}],"lessThan":"25.2","status":"affected","version":"1.8","versionType":"rpm, exe"}]}],"cveId":"CVE-2025-10698","cwes":["CWE-276","CWE-1269"],"description":"Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Identity Console: from 1.8 through 25.2.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6,"severity":"medium","source":"CNA: OpenText","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:C/RE:L/U:Amber","version":"4.0"},{"score":6,"severity":"medium","source":"NVD: security@opentext.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:L/U:Amber","version":"4.0"}],"modifiedAt":1794503840973,"publishedAt":1794500984443,"references":[{"source":"CNA: OpenText","tags":[],"url":"https://docs.microfocus.com/doc/29/25.4/securityandsoftwarefixes"},{"source":"security@opentext.com","tags":[],"url":"https://docs.microfocus.com/doc/29/25.4/securityandsoftwarefixes"}],"remediation":[],"revision":"618433120cdf0c26310dded772816d4a9b234d26a01d8ff5e7773f750dfcd8a6","sources":[{"modifiedAt":1794500984443,"name":"CNA: OpenText","retrievedAt":1794503297971,"url":"https://www.cve.org/CVERecord?id=CVE-2025-10698"},{"modifiedAt":1794503840973,"name":"NVD","retrievedAt":1794507522432,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10698"}],"ssvc":null,"status":"published","title":"Improper File Permissions on Private Key Files in Docker Deployments","updatedAt":1794507522432}