Design/Logic Flaw

2017-04-2018:59:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document.

CPENameOperatorVersion
access_managereq4.3
access_managereq4.3.1
access_managereq4.2.2

Name	Operator	Version
access_manager	eq	4.3
access_manager	eq	4.3.1
access_manager	eq	4.2.2

References

www.novell.com/support/kb/doc.php?id=7018509