CVE-2021-22509

Handling of sensitive data in process memory in NetIQ Advance Authentication

CVSS 8.1 HIGHEPSS 0.2%CWE-312

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Affected products

OpenText · NetIQ Advance Authentication

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html