CVE-2022-26329

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

CVE-2022-26329

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

CVE-2022-22462

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

CVE-2022-22462

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

Design/Logic Flaw

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

Privilege escalation

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

Micro Focus NetIQ Identity Manager security vulnerabilities

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. A security vulnerability exists in...

Symantec Identity Manager cross-site scripting vulnerability

Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager versions 14.3 CP3, 14.4.1, and 14.4.2, which stems from a user inputting a CRLF sequence that results in the returned response being split into two...

Symantec Identity Manager cross-site scripting vulnerability

Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager versions 14.3 CP3, 14.4.1, and 14.4.2, which can be exploited by an attacker to enumerate the current user's Oracle LDAP attributes by modifying the...

Symantec Identity Manager cross-site scripting vulnerability

Symantec Identity Manager is an identity management system from Symantec Corporation USA. A security vulnerability exists in Symantec Identity Manager versions 14.3 CP3, 14.4.1, and 14.4.2. An attacker could exploit this vulnerability to execute malicious HTML and JavaScript code in a client...

CVE-2022-22462

CVE-2022-22462 affects IBM Security Verify Governance, Identity Manager virtual appliance component (10.0.1). The issue stems from the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM’s IBM Bulletin confirms the vulne...

CVE-2022-22462 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

CVE-2022-22462: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

Security Bulletin: IBM Security Verify Governance, Identity Manager virtual appliance component uses weaker than expected cryptography (CVE-2022-22462)

Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities. Please apply the fixes as described below. Vulnerability Details CVEID:CVE-2022-22462 DESCRIPTION: IBM Security Verify Governance uses weaker than expected cryptograph...

PT-2023-12863 · Netiq · Netiq Identity Manager

Name of the Vulnerable Software and Affected Versions: NetIQ Identity Manager versions prior to 4.8.5 Description: The issue allows an attacker to determine whether a file exists on the filesystem. This is a file existence disclosure vulnerability in the NetIQ Identity Manager plugin...

CVE-2022-26329 File existence disclosue vulnerability in IDM plugin

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

CVE-2022-26329

The vulnerability CVE-2022-26329 affects NetIQ Identity Manager plugin (prior to version 4.8.5). It is a File Presence Disclosure vulnerability that lets an attacker determine whether a file exists on the filesystem. Affected products: Micro Focus NetIQ Identity Manager Identity Manager versions ...

CVE-2022-26329 File existence disclosue vulnerability in IDM plugin

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

CVE-2022-26329: Insertion of Sensitive Information into Externally-Accessible File or Directory

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL...

PT-2023-8809 · Oracle +1 · Oracle Ldap Attribute Handler +2

Name of the Vulnerable Software and Affected Versions: Broadcom Symantec Identity Manager and Symantec Identity Governance and Administration affected versions not specified Description: The issue is related to the Oracle LDAP Attribute Handler component, which fails to protect the web page...