PT-2017-8764 · Netiq · Netiq Access Manager
Published
2017-03-23
·
Updated
2017-03-24
·
CVE-2016-5755
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
NetIQ Access Manager versions 4.1 through 4.1.2 before Hot Fix 1
NetIQ Access Manager versions 4.2 through 4.2.2
Description
The issue is related to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting.
Recommendations
For versions 4.1 through 4.1.2 before Hot Fix 1, apply Hot Fix 1 to resolve the issue.
For versions 4.2 through 4.2.2, update to version 4.2.2 or later to resolve the issue.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netiq Access Manager