PT-2024-10768 · Netiq+1 · Netiq Imanager+1

Published 2024-11-06 · Updated 2024-11-10 · CVE-2020-11859

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText iManager versions prior to 3.2.3 NetIQ iManager versions prior to 3.2.3

Description The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting (XSS) in OpenText iManager and NetIQ iManager. This high-severity vulnerability can be exploited to compromise system integrity.

Recommendations For OpenText iManager versions prior to 3.2.3, upgrade to iManager 3.2.3 or later for remediation. For NetIQ iManager versions prior to 3.2.3, update to the latest version to safeguard your systems.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-11859

Affected Products

Netiq Imanager

Opentext Imanager

References · 12

• https://osv.dev/vulnerability/CVE-2020-11859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11859 · Security Note
• https://twitter.com/transilienceai/status/1855476796696690956 · Twitter Post
• https://twitter.com/CVEnew/status/1854170456518992272 · Twitter Post
• https://t.me/cvenotify/100794 · Telegram Post
• https://t.me/cvedetector/10007 · Telegram Post
• https://twitter.com/transilienceai/status/1854386274679013510 · Twitter Post
• https://twitter.com/transilienceai/status/1854386286209171584 · Twitter Post
• https://twitter.com/transilienceai/status/1855476803709653285 · Twitter Post
• https://netiq.com/documentation/imanager-32/imanager323_releasenotes/data/imanager323_releasenotes.html · Note
• https://twitter.com/UndercodeNews/status/1855016205524066351 · Twitter Post
• https://twitter.com/transilienceai/status/1854386266374377619 · Twitter Post