PT-2014-6353

CVE-2014-5217

·

Publicado

2014-12-23

·

Atualizado

2021-04-09

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions NetIQ Access Manager (NAM) versions 4.0 through 4.1
Description A cross-site request forgery (CSRF) issue exists in the Administration Console server, specifically in the nps/servlet/webacc component. This allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via an fw.SetPassword action.
Recommendations For NetIQ Access Manager (NAM) versions 4.0 through 4.1, update to version 4.1 or later to resolve the issue.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-352: Cross-Site Request Forgery (CSRF)
Identificadores relacionados
CVE-2014-5217
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com