PT-2018-11857

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager driver versions prior to 4.7 Description The issue allows for an SSL handshake renegotiation, which could result in a man-in-the-middle MITM attack. This means an attacker could potentially intercept and alter...

PT-2018-11868

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.7 Description The issue concerns the NetIQ Identity Manager driver log file, which provides details that could aid in system or configuration enumeration in versions prior to 4.7. Recommendations For...

PT-2018-11879

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.7 Description The issue provides details that could aid in system enumeration through the NetIQ Identity Manager driver log file. Recommendations For versions prior to 4.7, update to version 4.7 or...

PT-2018-18199

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.7 Description The communication channel is susceptible to a Denial of Service DoS attack. Recommendations For versions prior to 4.7, update to version 4.7 or later to resolve the issue...

CVE-2018-1349: Insertion of Sensitive Information into Log File

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...

CVE-2018-1348: Undefined Security Weakness

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...

CVE-2018-1350: Insertion of Sensitive Information into Log File

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...

Multiple Cross-Site Scripting Vulnerabilities in Micro Focus Identity Manager and iManager Identity Manager Plug-in

Micro Focus Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the basis for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. iManager is one of the WEB-based application. Y...

Micro Focus NetIQ Identity Manager Plugins Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...

Micro Focus NetIQ Identity Manager Applications Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager Applications is a suite of identity management applications from Micro Focus UK. The program provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity Manage...

Micro Focus NetIQ Identity Manager Oracle EBS Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.Oracle EBS driver is one of the EBS...

Micro Focus NetIQ Identity Manager Code Execution Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...

Micro Focus NetIQ Identity Manager JDBC Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is an identity management solution from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.JDBC driver is one of the database connection...

Spoofing

An XML parsing vulnerability affects IBM SAML-based single sign-on SSO systems IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a differe...

CVE-2018-1443

An XML parsing vulnerability affects IBM SAML-based single sign-on SSO systems IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a differe...

CVE-2018-1443

An XML parsing vulnerability affects IBM SAML-based single sign-on SSO systems IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a differe...

PT-2018-12507

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager versions 9.0.0 through 9.0.4 IBM Tivoli Federated Identity Manager versions 6.0.2 through 6.2 Description The issue is related to an XML parsing vulnerability in IBM SAML-based single sign-on systems. This...

CVE-2018-1443: Improper Authentication

An XML parsing vulnerability affects IBM SAML-based single sign-on SSO systems IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a differe...

Cross site scripting

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...

CVE-2017-7427

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...