NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2epss 0.9%
probabilidade de exploração
0.9%top 44% das CVEs
exploração observada
nãonenhuma fonte reporta
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users.
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
NetIQ · Identity Manager