Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: NetIQ Identity Manager 4.7 Clear all filters
TI-2018-05529 CVE-2018-7673 · GHSA-6wc4-c7m9-9699

NetIQ Identity Manager DoS Attack

Priority LOW 34

The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0082 Published 2018-03-26 Fixed in 4.7
TI-2018-01250 CVE-2018-1350 · GHSA-wc34-gfxh-9w6x

NetIQ Identity Manager Driver Component Information Leakage

Priority LOW 25

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00777 Published 2018-03-26 Fixed in 4.7 CWE-532
TI-2018-01248 CVE-2018-1348 · GHSA-93x5-g5xx-jcpr

NetIQ Identity Manager SSL Renegotiation

Priority LOW 34

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.01036 Published 2018-03-26 Fixed in 4.7