PT-2017-17734 · Novell+1 · Novell Imanager+1

Publicado 2017-05-03 · Atualizado 2019-10-03 · CVE-2017-7432

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1 NetIQ iManager versions 3.x before 3.0.3.1

Description The issue allows for a webshell upload, which can lead to unauthorized access and control of the system.

Recommendations For Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1, update to 2.7 SP7 Patch 10 HF1 or later. For NetIQ iManager versions 3.x before 3.0.3.1, update to 3.0.3.1 or later.

Correção

Identificadores relacionados

CVE-2017-7432

Produtos afetados

Netiq Imanager

Novell Imanager

Referências · 7

• https://osv.dev/vulnerability/CVE-2017-7432 · Aviso do Fabricante
• https://bugzilla.novell.com/show_bug.cgi?id=1027619 · Nota
• https://novell.com/support/kb/doc.php?id=7010166 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7432 · Nota de Segurança
• https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~ · Nota
• https://netiq.com/support/kb/doc.php?id=7016795 · Nota
• https://dl.netiq.com/Download?buildid=24FxpmqdThE~ · Nota