PT-2018-18211 · Netiq · Novell Netiq Access Manager+1

Publicado 2018-08-09 · Atualizado 2021-04-13 · CVE-2018-7686

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetIQ eDirectory versions prior to 9.1.1 HF1

Description The issue is related to information leakage due to shared memory usage, which can lead to an out-of-bounds read information disclosure. This affects the dhost service in Novell NetIQ Access Manager.

Recommendations For versions prior to 9.1.1 HF1, update to version 9.1.1 HF1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-7686

ZDI-18-913

Produtos afetados

Netiq Edirectory

Novell Netiq Access Manager

Referências · 4

• https://netiq.com/documentation/edirectory-91/edirectory9111_releasenotes/data/edirectory9111_releasenotes.html · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-913 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7686 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7686 · Nota de Segurança