2959 matches found
CVE-2017-1705: Exposure of Sensitive Information to an Unauthorized Actor
IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427...
CVE-2018-7676
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
Design/Logic Flaw
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
Information disclosure
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7674
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7676
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7674
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7674 IDM URL Redirection attack
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7674
The CVE concerns NetIQ Identity Manager’s user console vulnerability: URL redirection in versions before 4.7. Affected element is the user console; the underlying flaw enables redirection to external sites. The documents state the impact as the ability to direct users to other Web sites, with no ...
CVE-2018-7676
The CVE refers to Micro Focus NetIQ Identity Manager. In versions prior to 4.7, when userapp with log/trace enabled, there is an information disclosure vulnerability that may leak sensitive data. Impact is described as a confidentiality breach (partial) with no integrity/availability impact state...
CVE-2018-7676 IDM Information Leakage
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
PT-2018-18202
Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.7 Description The issue concerns the potential leak of sensitive information when the userapp has log or trace enabled. Recommendations For versions prior to 4.7, consider disabling the log and trace...
CVE-2018-7676: Exposure of Sensitive Information to an Unauthorized Actor
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
CVE-2018-7674: URL Redirection to Untrusted Site
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
PT-2018-18200
Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.7 Description The issue affects the NetIQ Identity Manager user console, making it susceptible to URL redirection. Recommendations For versions prior to 4.7, update to version 4.7 or later to resolve...
NetIQ Identity Manager Man-in-the-Middle Attack Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A man-in-the-middle attack vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker can bypass certain security restrictions by performing a man-in-the-middle attack...
NetIQ Identity Manager Denial of Service Vulnerability
Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. communication...
NetIQ Identity Manager System Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...
NetIQ Identity Manager System or Configuration Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system or configuration enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability for system or configuration enumeration using details provided i...