TI-2023-10089 CVE-2023-24468 · GHSA-6xff-36r8-rhfg
Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2
Priority MEDIUM 50
Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2
Micro Focus International
Records274All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical63CVSS 9.0–10.0
CVSS high95CVSS 7.0–8.9
Exploited now
Micro Focus International records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Netiq Advanced Authentication · all components
TI-2021-05498 CVE-2021-22530 · GHSA-2qhq-448h-5333
Improper account management vulnerability in NetIQ Advance Authentication
Priority MEDIUM 42
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login.
TI-2021-15804 CVE-2021-38121 · GHSA-x9wr-745j-rm5j
Weak communication protocol identified in Advance Authentication client application
Priority LOW 39
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.
TI-2021-05478 CVE-2021-22509 · GHSA-gc3j-m753-j4hj
Handling of sensitive data in process memory in NetIQ Advance Authentication
Priority LOW 37
A vulnerability identified in storing and reusing information in Advance Authentication.
TI-2021-15805 CVE-2021-38122 · GHSA-46h9-pp48-mv2m
Cross-Site Scripting (XSS) in Advance Authentication
Priority LOW 35
A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information.
TI-2021-05466 CVE-2021-22497 · GHSA-423x-7gwr-q727
Advanced Authentication Improper Session Management
Priority LOW 33
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.
TI-2021-15803 CVE-2021-38120 · GHSA-h3vv-p837-jj7r
Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication
Priority LOW 32
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters.
TI-2021-05484 CVE-2021-22515 · GHSA-8hm3-6v9w-j99h
Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server
Priority LOW 30
Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.
TI-2022-18263 CVE-2022-38753 · GHSA-55jw-g3q6-jfp4
This update resolves a multi-factor authentication bypass attack
Priority LOW 29
This update resolves a multi-factor authentication bypass attack
TI-2021-05497 CVE-2021-22529 · GHSA-4x64-hhrm-2mp8
Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication
Priority LOW 29
A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information.
TI-2019-08719 CVE-2019-11650 · GHSA-pg2m-jpwc-8rw6
A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.
Priority LOW 28
A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.