PT-2017-17734 · Novell+1 · Novell Imanager+1

Published 2017-05-03 · Updated 2019-10-03 · CVE-2017-7432

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1 NetIQ iManager versions 3.x before 3.0.3.1

Description The issue allows for a webshell upload, which can lead to unauthorized access and control of the system.

Recommendations For Novell iManager versions 2.7.x before 2.7 SP7 Patch 10 HF1, update to 2.7 SP7 Patch 10 HF1 or later. For NetIQ iManager versions 3.x before 3.0.3.1, update to 3.0.3.1 or later.

Fix

Related Identifiers

CVE-2017-7432

Affected Products

Netiq Imanager

Novell Imanager

References · 7

• https://osv.dev/vulnerability/CVE-2017-7432 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7432 · Security Note
• https://bugzilla.novell.com/show_bug.cgi?id=1027619 · Note
• https://novell.com/support/kb/doc.php?id=7010166 · Note
• https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~ · Note
• https://netiq.com/support/kb/doc.php?id=7016795 · Note
• https://dl.netiq.com/Download?buildid=24FxpmqdThE~ · Note