1015 matches found
CVE-2018-7674 IDM URL Redirection attack
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
NetIQ Access Manager Identity Server Component Cross-Site Request Forgery Vulnerability
NetIQ Access Manager NAM is a set of resource access control solutions from American NetIQ. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Identity Server is one of the authentication servers. A cross-site request forgery...
NetIQ Access Manager Administration Console Cross-Site Scripting Vulnerability
NetIQ Access Manager NAM is a resource access control solution from NetIQ Corporation. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Administration Console is one of the administration console programs. A cross-site scripting...
CVE-2018-7674: URL Redirection to Untrusted Site
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...
CVE-2018-7676: Exposure of Sensitive Information to an Unauthorized Actor
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information...
NetIQ Identity Manager Man-in-the-Middle Attack Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A man-in-the-middle attack vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker can bypass certain security restrictions by performing a man-in-the-middle attack...
NetIQ Identity Manager System or Configuration Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system or configuration enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability for system or configuration enumeration using details provided i...
NetIQ Identity Manager Denial of Service Vulnerability
Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. communication...
NetIQ Identity Manager System Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...
CVE-2018-1349
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
CVE-2018-1348
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
CVE-2018-1348
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
CVE-2018-7673
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
Design/Logic Flaw
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...
Design/Logic Flaw
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...
Memory corruption
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
Code injection
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...
CVE-2018-1350
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...