900 matches found
CVE-2018-7674
The CVE concerns NetIQ Identity Manager’s user console vulnerability: URL redirection in versions before 4.7. Affected element is the user console; the underlying flaw enables redirection to external sites. The documents state the impact as the ability to direct users to other Web sites, with no ...
CVE-2018-7674 IDM URL Redirection attack
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7676 IDM Information Leakage
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
NetIQ Access Manager Identity Server Component Cross-Site Request Forgery Vulnerability
NetIQ Access Manager NAM is a set of resource access control solutions from American NetIQ. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Identity Server is one of the authentication servers. A cross-site request forgery...
NetIQ Access Manager Administration Console Cross-Site Scripting Vulnerability
NetIQ Access Manager NAM is a resource access control solution from NetIQ Corporation. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Administration Console is one of the administration console programs. A cross-site scripting...
NetIQ Identity Manager Man-in-the-Middle Attack Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A man-in-the-middle attack vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker can bypass certain security restrictions by performing a man-in-the-middle attack...
NetIQ Identity Manager System or Configuration Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system or configuration enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability for system or configuration enumeration using details provided i...
NetIQ Identity Manager Denial of Service Vulnerability
Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. communication...
NetIQ Identity Manager System Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...
CVE-2018-1348
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
CVE-2018-1349
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
CVE-2018-1348
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
CVE-2018-1350
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...
Design/Logic Flaw
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
Memory corruption
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
CVE-2018-1349
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
CVE-2018-7673
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
CVE-2018-7673
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...