Fortra Application Hub Sensitive Information Disclosure Vulnerability

A vulnerability exists in Fortra Application Hub (formerly Helpsystems One) versions prior to 1.3, where under certain log settings, the IAM or CORE service may inadvertently log credentials in the IAM logfile. This issue is classified as sensitive information disclosure, allowing unauthorized access to logged credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, specifically credentials, through the application's log files.

Remediation

Users are advised to upgrade to Fortra Application Hub version 1.3. As a mitigation measure, avoid using trace level logging in Fortra Application Hub.