Identity Server downloadBasicSSOServlet Code Execution

The vulnerability of the downloadBasicSSOServlet component in the Identity Server’s authentication and access control mechanism is related to errors in managing registration data when processing the fileinfo1 parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

PT-2017-3502

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.3 through 4.4 Description The issue is related to a bug in the Identity Server component of NetIQ Access Manager when accessing a basic SSO connector and downloading the BasicSSO connector plugins, particularly ...