Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HNetiq Imanager
APPNetiq3.03.0.13.0.23.0.2.13.0.33.0.3.1Novell Imanager
APPNovell2.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje
Powiązane podatności
CVE-2017-7432CRITICAL9.8ten sam produkt
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload...
CVE-2022-38758HIGH7.2ten sam produkt
Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute m...
CVE-2017-7425HIGH7.6ten sam produkt
Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2...
CVE-2017-5186HIGH7.5ten sam produkt
Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 ...
CVE-2013-3268HIGH10.0ten sam produkt
Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified i...