Lucene search

OpenTextCVE-2021-22529

HistoryAug 28, 2024 - 7:15 a.m.

CVE-2021-22529

2024-08-2807:15:06

CWE-200

OpenText

web.nvd.nist.gov

netiq advance authentication

vulnerability

sensitive information

version 6.3.5.1

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS

Percentile

9.6%

JSON

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version before 6.3.5.1

Affected configurations

Nvd

Node

microfocusnetiq_advanced_authenticationRange<6.3

microfocusnetiq_advanced_authenticationMatch6.3-

microfocusnetiq_advanced_authenticationMatch6.3sp1

microfocusnetiq_advanced_authenticationMatch6.3sp2

microfocusnetiq_advanced_authenticationMatch6.3sp3

microfocusnetiq_advanced_authenticationMatch6.3sp4

microfocusnetiq_advanced_authenticationMatch6.3sp4_patch1

microfocusnetiq_advanced_authenticationMatch6.3sp5

VendorProductVersionCPE
microfocusnetiq_advanced_authentication*cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5:*:*:*:*:*:*

Vendor	Product	Version	CPE
microfocus	netiq_advanced_authentication	*	cpe:2.3:a:microfocus:netiq_advanced_authentication::::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NetIQ Advance Authentication",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "<",
        "status": "affected",
        "version": "6.3.5.1",
        "versionType": "server"
      }
    ]
  }
]

References

www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS

Percentile

9.6%

JSON

Related for CVE-2021-22529