CVE-2018-1342

Published: Jan 26, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.

Affected (2)

Products: Netiq: Access Manager

Netiq

1 product

Access Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Netiq Access Manager	Version 4.3
Netiq Access Manager	Version 4.4

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

https://www.novell.com/support/kb/doc.php?id=7022444

Source: security@opentext.com

https://www.novell.com/support/kb/doc.php?id=7022444

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.