CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console

An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server Server IP/DNS field and is triggering connection to arbitrary address...

CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console

An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server Server IP/DNS field and is triggering connection to arbitrary address...

NetIQ Identity Console 安全漏洞

NetIQ Identity Console is an identity management platform from NetIQ, Inc. A security vulnerability exists in NetIQ Identity Console versions prior to 1.7 Service Pack 2 that stems from the detection of an incorrect authorization level in the login panel, which could lead to unauthenticated...