322 matches found
CVE-2019-0301
Technical details (affected product/versions, root cause, impact) are not publicly available in the provided documents. Monitor for updates.
Information disclosure
IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...
CVE-2017-9284
IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...
CVE-2017-9284
Affected product/version: Micro Focus IDM Identity Applications (IDM 4.6 Identity Applications) before 4.6.2.1. Vulnerability type / impact: Information disclosure; may expose sensitive information. Root cause / nature (as stated): IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensiti...
CVE-2017-9284 IDM 4.6 Identity Applications information leakage
IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...
CVE-2017-9284: Exposure of Sensitive Information to an Unauthorized Actor
IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information...
CVE-2016-9575
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...
Design/Logic Flaw
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...
CVE-2016-9575
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...
CVE-2016-9575
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...
CVE-2016-9575
CVE-2016-9575 concerns an insufficient permission check in IPA’s certprofile-mod command. Affected products/versions include IPA 4.2.x, 4.3.x before 4.3.3, and 4.4.x before 4.4.3. An authenticated, unprivileged attacker could modify certificate profiles, enabling issuance of certificates with arb...
CVE-2017-9272
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack...
CVE-2017-9273
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...
Design/Logic Flaw
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack...
Design/Logic Flaw
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...
CVE-2017-9273
CVE-2017-9273 affects Identity Manager (IDM) 4.5, specifically the Bi-directional driver, prior to version 4.0.3.0. The vulnerability allows unauthorized changes to log configuration through the driver component, with network access, low attack complexity, and no authentication required. Impact i...
CVE-2017-9272
CVE-2017-9272 affects NetIQ IDM (Identity Manager) 4.5, where the Bi-directional driver prior to 4.0.3.0 is vulnerable to denial-of-service. The CNVD entry confirms the vulnerability in the Bi-directional driver and states exploitation could cause DoS. Remediation is to upgrade to 4.0.3.0 or late...
CVE-2017-9273
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...