PT-2024-10883 · Netiq · Netiq Advance Authentication

Published 2024-08-27 · Updated 2024-09-13 · CVE-2021-22529

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetIQ Advance Authentication versions prior to 6.3.5.1 NetIQ Advance Authentication versions up to 6.3 SP5 Patch 1

Description A vulnerability identified in NetIQ Advance Authentication leaks sensitive server information.

Recommendations For versions prior to 6.3.5.1, upgrade to version 6.4 to remediate the issue. For versions up to 6.3 SP5 Patch 1, upgrade to version 6.4 to remediate the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-22529

Affected Products

Netiq Advance Authentication

References · 8

• https://osv.dev/vulnerability/CVE-2021-22529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22529 · Security Note
• https://t.me/cvenotify/92442 · Telegram Post
• https://t.me/cvenotify/94555 · Telegram Post
• https://twitter.com/transilienceai/status/1830248183269560486 · Twitter Post
• https://t.me/cvedetector/4313 · Telegram Post
• https://twitter.com/CVEnew/status/1828684715089445278 · Twitter Post
• https://netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html · Note