Lucene search

K
cvelistMicrofocusCVELIST:CVE-2022-26326
HistoryMay 02, 2022 - 6:43 p.m.

CVE-2022-26326 Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2

2022-05-0218:43:42
CWE-601
microfocus
www.cve.org
3
netiq access manager
open redirection
vulnerability

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

31.3%

Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

CNA Affected

[
  {
    "platforms": [
      "All"
    ],
    "product": "NetIQ Access Manager",
    "vendor": "Micro Focus",
    "versions": [
      {
        "lessThan": "5.0.2",
        "status": "affected",
        "version": "NetIQ Access Manager",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

31.3%

Related for CVELIST:CVE-2022-26326