PT-2024-10990 · Netiq · Netiq Advance Authentication

Published 2024-08-27 · Updated 2024-09-13 · CVE-2021-38122

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetIQ Advance Authentication versions prior to 6.3.5.1

Description A Cross-Site Scripting issue has been identified in NetIQ Advance Authentication, impacting server functionality and potentially disclosing sensitive information.

Recommendations For versions prior to 6.3.5.1, update to version 6.3.5.1 or later to mitigate the risks.

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2021-38122

Affected Products

Netiq Advance Authentication

References · 9

• https://osv.dev/vulnerability/CVE-2021-38122 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38122 · Security Note
• https://t.me/cvedetector/4309 · Telegram Post
• https://twitter.com/transilienceai/status/1830248214907285930 · Twitter Post
• https://twitter.com/transilienceai/status/1830248209182003345 · Twitter Post
• https://t.me/cvenotify/94558 · Telegram Post
• https://twitter.com/CVEnew/status/1828684719493366183 · Twitter Post
• https://t.me/cvenotify/92446 · Telegram Post
• https://netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html · Note