TI-2021-05478 CVE-2021-22509 · GHSA-gc3j-m753-j4hj
Handling of sensitive data in process memory in NetIQ Advance Authentication
Priority LOW 37
A vulnerability identified in storing and reusing information in Advance Authentication.
Vulnerabilities
6 records
TI-2021-05497 CVE-2021-22529 · GHSA-4x64-hhrm-2mp8
Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication
Priority LOW 29
A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information.
TI-2021-05498 CVE-2021-22530 · GHSA-2qhq-448h-5333
Improper account management vulnerability in NetIQ Advance Authentication
Priority MEDIUM 42
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login.
TI-2021-15803 CVE-2021-38120 · GHSA-h3vv-p837-jj7r
Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication
Priority LOW 32
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters.
TI-2021-15804 CVE-2021-38121 · GHSA-x9wr-745j-rm5j
Weak communication protocol identified in Advance Authentication client application
Priority LOW 39
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.
TI-2021-15805 CVE-2021-38122 · GHSA-46h9-pp48-mv2m
Cross-Site Scripting (XSS) in Advance Authentication
Priority LOW 35
A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information.