PT-2017-17732 · Novell+1 · Novell Imanager+1

Published 2017-05-03 · Updated 2017-05-12 · CVE-2017-7430

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1 NetIQ iManager versions 3.x before 3.0.3.1

Description The issue is related to a persistent XSS vulnerability in the Framework component.

Recommendations For Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1, update to 2.7 SP7 Patch 10 HF1 or later. For NetIQ iManager versions 3.x before 3.0.3.1, update to 3.0.3.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-7430

Affected Products

Netiq Imanager

Novell Imanager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2017-7430 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7430 · Vendor Advisory
• https://dl.netiq.com/Download?buildid=24FxpmqdThE~ · Note
• https://bugzilla.novell.com/show_bug.cgi?id=1024959 · Note
• https://novell.com/support/kb/doc.php?id=7010166 · Note
• https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~ · Note
• https://bugzilla.novell.com/show_bug.cgi?id=1030691 · Note
• https://netiq.com/support/kb/doc.php?id=7016795 · Note