Lucene search

[email protected]NVD:CVE-2021-22529

HistoryAug 28, 2024 - 7:15 a.m.

CVE-2021-22529

2024-08-2807:15:06

CWE-200

[email protected]

web.nvd.nist.gov

vulnerability

netiq

advance authentication

server information

version 6.3.5.1

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.6%

JSON

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version before 6.3.5.1

Affected configurations

Nvd

Node

microfocusnetiq_advanced_authenticationRange<6.3

microfocusnetiq_advanced_authenticationMatch6.3-

microfocusnetiq_advanced_authenticationMatch6.3sp1

microfocusnetiq_advanced_authenticationMatch6.3sp2

microfocusnetiq_advanced_authenticationMatch6.3sp3

microfocusnetiq_advanced_authenticationMatch6.3sp4

microfocusnetiq_advanced_authenticationMatch6.3sp4_patch1

microfocusnetiq_advanced_authenticationMatch6.3sp5

VendorProductVersionCPE
microfocusnetiq_advanced_authentication*cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1:*:*:*:*:*:*
microfocusnetiq_advanced_authentication6.3cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5:*:*:*:*:*:*

Vendor	Product	Version	CPE
microfocus	netiq_advanced_authentication	*	cpe:2.3:a:microfocus:netiq_advanced_authentication::::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1::::::
microfocus	netiq_advanced_authentication	6.3	cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5::::::

References

www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.6%

JSON

Related for NVD:CVE-2021-22529

cvelist1 cve1 vulnrichment1