Cross site request forgery (csrf)

2017-05-0305:59:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

CPENameOperatorVersion
imanagereq3.0.1
imanagereq3.0.3.1
imanagereq3.0
imanagereq3.0.3
imanagereq3.0.2.1
imanagereq3.0.2
imanagereq2.7 sp1
imanagereq2.7 sp4
imanagereq2.7 sp7patch10
imanagereq2.7 sp7patch1

Name	Operator	Version
imanager	eq	3.0.1
imanager	eq	3.0.3.1
imanager	eq	3.0
imanager	eq	3.0.3
imanager	eq	3.0.2.1
imanager	eq	3.0.2
imanager	eq	2.7 sp1
imanager	eq	2.7 sp4
imanager	eq	2.7 sp7patch10
imanager	eq	2.7 sp7patch1

Rows per page:

1-10 of 281

References

bugzilla.novell.com/show_bug.cgi?id=1024963

bugzilla.novell.com/show_bug.cgi?id=1030692

dl.netiq.com/Download?buildid=24FxpmqdThE~

dl.netiq.com/Download?buildid=wpS1UqIlx-o~

www.netiq.com/support/kb/doc.php?id=7016795

www.novell.com/support/kb/doc.php?id=7010166