CVE-2017-7434

CVE-2017-7434 affects the NetIQ Identity Manager JDBC driver prior to 4.6. A vulnerability allows passwords to be logged in exception log files due to sending out incorrect XML configurations. Public details in the sources indicate the issue is documented in NVD and CNVD records, with no explicit...

CVE-2017-9278

The CVE-2017-9278 entry relates to the NetIQ Identity Manager Oracle EBS driver. Affected component: Oracle EBS driver (NetIQ Identity Manager) prior to version 4.0.2.0. Root cause: the driver logs could contain the driver authentication password, which may be disclosed to any attacker able to re...

CVE-2017-9279

CVE-2017-9279 affects NetIQ Identity Manager prior to 4.5.6.1. In the Themes handling of the User Application Administration, it allows uploading files with double extensions or non-image content, enabling a malicious administrator to potentially execute code or mislead users. Root cause: insuffi...

CVE-2017-9280 Novell Identity Manager User Application get request url contains the session token.

Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar...

CVE-2017-9280

CVE-2017-9280 affects NetIQ Identity Manager Applications prior to 4.5.6.1. The vulnerability arises from session tokens being included in GET URLs, which can expose user sessions to untrusted third parties via proxies, referer URLs, or similar channels. The issue is documented across multiple so...

PT-2018-8501

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.5.6.1 Description The issue allows malicious user administrators to upload files with double extensions or non-image content in the Themes handling of the User Application Administration. This could...

CVE-2017-9280: Use of GET Request Method With Sensitive Query Strings

Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar...

PT-2018-8502

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.5.6.1 Description The issue concerns the exposure of user sessions to untrusted third parties. This could occur via proxies or referer URLs due to the inclusion of session tokens in GET URLs...

CVE-2017-9279: Unrestricted Upload of File with Dangerous Type

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...

CVE-2017-9278: Insertion of Sensitive Information into Log File

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables...

PT-2018-8500

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager Oracle EBS driver versions prior to 4.0.2.0 Description The issue concerns the NetIQ Identity Manager Oracle EBS driver sending EBS logs that contain the driver authentication password. This could potentially disclose th...

CVE-2017-7434: Insertion of Sensitive Information into Log File

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles...

PT-2018-8378

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.6 Description The issue arises from the JDBC driver sending out incorrect XML configurations, which could lead to passwords being logged into exception logfiles. Recommendations For versions prior to...

CVE-2017-7426

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

Xxe

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

CVE-2017-7426

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

CVE-2017-7426 iManager - XML External Entity vulnerabilities

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

CVE-2017-7426

The CVE-2017-7426 issue affects NetIQ Identity Manager Plugins prior to version 4.6.1. It stems from XML External Entity (XXE) handling flaws in the plugins, enabling attackers to potentially disclose information and cause a denial of service. The NVD entries provide CVSSv3/2 metrics indicating h...

CVE-2017-7426: Improper Restriction of XML External Entity Reference

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

PT-2018-8375

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager Plugins versions prior to 4.6.1 Description The issue concerns XML External XML Entity XXE handling flaws that could be exploited by attackers to leak information or cause denial of service attacks. Recommendations For...