Incorrect Default Permissions in OpenText Identity Console Affecting Multiple Platforms
CVE-2025-10698

6MEDIUM

Key Information:

Vendor

Opentext
Status
Identity Console
Vendor
CVE Published:
12 November 2026

What is CVE-2025-10698?

The vulnerability in OpenText Identity Console arises from incorrect default permissions and the use of a non-release configuration, impacting deployments on Windows, Linux, and 64-bit systems. This flaw permits unauthorized retrieval of sensitive embedded data, potentially exposing critical information to malicious actors. Organizations using versions between 1.8 and 25.2 should assess their configurations to mitigate risks associated with unauthorized access.

Affected Version(s)

Identity Console Windows 1.8 < 25.2

References

https://docs.microfocus.com/doc/29/25.4/securityandsoftwa...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.