CVE-2021-22530: Improper Locking

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...

CVE-2021-38121: Inadequate Encryption Strength

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1...

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A command execution vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which can be exploit...

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A brute force vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which stems from not...

CVE-2024-4556: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...

CVE-2024-4555: Incorrect Privilege Assignment

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...

CVE-2021-38122: Improper Input Validation

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1...

OpenText NetIQ Access Manager 跨站脚本漏洞

OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A cross-site scripting vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from improper input validation and could lead to cross-site...

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. An information disclosure vulnerability exists in NetIQ Advance Authentication versions prior to 6.3.5.1, which can be...

PT-2024-31688 · Opentext · Opentext Netiq Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4 OpenText NetIQ Access Manager versions prior to 5.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal...

PT-2024-10883 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 NetIQ Advance Authentication versions up to 6.3 SP5 Patch 1 Description: A vulnerability identified in NetIQ Advance Authentication leaks sensitive server information. Recommendations: Fo...

PT-2024-10881 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in storing and reusing information in Advance Authentication can lead to leakage of sensitive data to unauthorized users. Recommendations: Update t...

PT-2024-31687

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 OpenText NetIQ Access Manager versions prior to 5.1 Description: The issue is related to improper privilege management, allowing user account impersonation in a specific scenario...

PT-2024-31686

Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 and 5.1 Description: The issue is caused by an improper input validation flaw in OpenText NetIQ Access Manager, leading to a Cross-Site Scripting XSS attack. Recommendations: For version...

PT-2024-10989 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: The issue is related to an insufficient or weak TLS protocol version used in the Advance authentication client-server communication when a specific service is accessed betwee...

PT-2024-10988 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in Advance Authentication allows bash command injection in administrative controlled functionality of backup due to improper handling in provided...

PT-2024-10990 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A Cross-Site Scripting issue has been identified in NetIQ Advance Authentication, impacting server functionality and potentially disclosing sensitive information...

PT-2024-10884 · Netiq · Netiq Advance Authentication

Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in NetIQ Advance Authentication does not enforce account lockout when a brute force attack is performed on API-based login. This issue may lead to...

OpenText NetIQ Privileged Account Manager 安全漏洞

OpenText NetIQ Privileged Account Manager is a customer management software from OpenText Canada. A security vulnerability exists in OpenText NetIQ Privileged Account Manager versions prior to 3.7.0.1, which originates from a cookie that is set when a token is successfully issued, which allows...

CVE-2020-25836

Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10...