Read the docs
TI-2017-05083 Aliases CVE-2017-7431GHSA-qwvv-8h5h-p3cc

Cross-site request forgery in Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…

Priority LOW 39CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

Why it matters now

EPSS 0.00579 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1—No fix listedCNA
  • Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 Vendor— Affected Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:*2.7VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:*2.7 sp1VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:*2.7 sp2VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:*2.7 sp3VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:*2.7 sp4VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:*2.7 sp4_patch1VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:*2.7 sp4_patch2VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:*2.7 sp4_patch3VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:*2.7 sp4_patch4VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:*2.7 sp5VulnerableNovell
  • cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:* Versions 2.7 sp1 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:* Versions 2.7 sp2 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:* Versions 2.7 sp3 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:* Versions 2.7 sp4 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:* Versions 2.7 sp4_patch1 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:* Versions 2.7 sp4_patch2 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:* Versions 2.7 sp4_patch3 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:* Versions 2.7 sp4_patch4 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:* Versions 2.7 sp5 Vulnerable ·Novell
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:novell:imanager:2.7:sp6:*:*:*:*:*:*2.7 sp6VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7:*:*:*:*:*:*2.7 sp7VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_1:*:*:*:*:*:*2.7 sp7_patch_1VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_10:*:*:*:*:*:*2.7 sp7_patch_10VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_2:*:*:*:*:*:*2.7 sp7_patch_2VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_3:*:*:*:*:*:*2.7 sp7_patch_3VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_4:*:*:*:*:*:*2.7 sp7_patch_4VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_5:*:*:*:*:*:*2.7 sp7_patch_5VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_6:*:*:*:*:*:*2.7 sp7_patch_6VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_7:*:*:*:*:*:*2.7 sp7_patch_7VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_8:*:*:*:*:*:*2.7 sp7_patch_8VulnerableNovell
cpe:2.3:a:novell:imanager:2.7:sp7_patch_9:*:*:*:*:*:*2.7 sp7_patch_9VulnerableNovell
cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:*3.0VulnerableNetIQ
cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableNetIQ
cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableNetIQ
cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:*3.0.2.1VulnerableNetIQ
cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableNetIQ
cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:*3.0.3.1VulnerableNetIQ
  • cpe:2.3:a:novell:imanager:2.7:sp6:*:*:*:*:*:* Versions 2.7 sp6 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7:*:*:*:*:*:* Versions 2.7 sp7 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_1:*:*:*:*:*:* Versions 2.7 sp7_patch_1 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_10:*:*:*:*:*:* Versions 2.7 sp7_patch_10 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_2:*:*:*:*:*:* Versions 2.7 sp7_patch_2 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_3:*:*:*:*:*:* Versions 2.7 sp7_patch_3 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_4:*:*:*:*:*:* Versions 2.7 sp7_patch_4 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_5:*:*:*:*:*:* Versions 2.7 sp7_patch_5 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_6:*:*:*:*:*:* Versions 2.7 sp7_patch_6 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_7:*:*:*:*:*:* Versions 2.7 sp7_patch_7 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_8:*:*:*:*:*:* Versions 2.7 sp7_patch_8 Vulnerable ·Novell
  • cpe:2.3:a:novell:imanager:2.7:sp7_patch_9:*:*:*:*:*:* Versions 2.7 sp7_patch_9 Vulnerable ·Novell
  • cpe:2.3:a:netiq:imanager:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·NetIQ
  • cpe:2.3:a:netiq:imanager:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·NetIQ
  • cpe:2.3:a:netiq:imanager:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·NetIQ
  • cpe:2.3:a:netiq:imanager:3.0.2.1:*:*:*:*:*:*:* Versions 3.0.2.1 Vulnerable ·NetIQ
  • cpe:2.3:a:netiq:imanager:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·NetIQ
  • cpe:2.3:a:netiq:imanager:3.0.3.1:*:*:*:*:*:*:* Versions 3.0.3.1 Vulnerable ·NetIQ

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-7431
  2. 2026-10-03 Alias added: GHSA-qwvv-8h5h-p3cc

References

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences