CVE-2018-7676

The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...

Design/Logic Flaw

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...

Information disclosure

The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...

CVE-2018-7676

The CVE refers to Micro Focus NetIQ Identity Manager. In versions prior to 4.7, when userapp with log/trace enabled, there is an information disclosure vulnerability that may leak sensitive data. Impact is described as a confidentiality breach (partial) with no integrity/availability impact state...

CVE-2018-7674

The CVE concerns NetIQ Identity Manager’s user console vulnerability: URL redirection in versions before 4.7. Affected element is the user console; the underlying flaw enables redirection to external sites. The documents state the impact as the ability to direct users to other Web sites, with no ...

CVE-2018-7674 IDM URL Redirection attack

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...

CVE-2018-7676 IDM Information Leakage

The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...

NetIQ Identity Manager Denial of Service Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. communication...

NetIQ Identity Manager System or Configuration Enumeration Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A system or configuration enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability for system or configuration enumeration using details provided i...

NetIQ Identity Manager System Enumeration Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...

NetIQ Identity Manager Man-in-the-Middle Attack Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A man-in-the-middle attack vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker can bypass certain security restrictions by performing a man-in-the-middle attack...

Memory corruption

The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...

CVE-2018-1349

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...

Code injection

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...

CVE-2018-7673

The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...

CVE-2018-1350

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...

CVE-2018-1348

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...

Design/Logic Flaw

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...

CVE-2018-7673

The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...

CVE-2018-1350

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...