PT-2017-17730 · Netiq · Netiq Imanager

Publicado 2017-11-06 · Atualizado 2019-10-09 · CVE-2017-7425

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetIQ iManager versions prior to 2.7.7 Patch 10 HF2 NetIQ iManager versions prior to 3.0.3.2

Description Multiple potential reflected XSS issues exist.

Recommendations For versions prior to 2.7.7 Patch 10 HF2, update to version 2.7.7 Patch 10 HF2 or later. For versions prior to 3.0.3.2, update to version 3.0.3.2 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-7425

Produtos afetados

Netiq Imanager

Referências · 6

• https://netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7425 · Nota de Segurança
• https://novell.com/support/kb/doc.php?id=7016795 · Nota
• https://novell.com/support/kb/doc.php?id=7021423 · Nota
• https://osv.dev/vulnerability/CVE-2017-7425 · Aviso do Fabricante
• https://netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html · Nota