← back
CVE-2017-14802

Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs

CVSS 5.4 MEDIUMEPSS 1.0%CWE-601
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
NetIQ · Access Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →