8.8

CVE-2017-7431

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Imanager Version 2.7
Novell ≫ Imanager Version 2.7 Update sp1
Novell ≫ Imanager Version 2.7 Update sp2
Novell ≫ Imanager Version 2.7 Update sp3
Novell ≫ Imanager Version 2.7 Update sp4
Novell ≫ Imanager Version 2.7 Update sp4_patch1
Novell ≫ Imanager Version 2.7 Update sp4_patch2
Novell ≫ Imanager Version 2.7 Update sp4_patch3
Novell ≫ Imanager Version 2.7 Update sp4_patch4
Novell ≫ Imanager Version 2.7 Update sp5
Novell ≫ Imanager Version 2.7 Update sp6
Novell ≫ Imanager Version 2.7 Update sp7
Novell ≫ Imanager Version 2.7 Update sp7_patch_1
Novell ≫ Imanager Version 2.7 Update sp7_patch_10
Novell ≫ Imanager Version 2.7 Update sp7_patch_2
Novell ≫ Imanager Version 2.7 Update sp7_patch_3
Novell ≫ Imanager Version 2.7 Update sp7_patch_4
Novell ≫ Imanager Version 2.7 Update sp7_patch_5
Novell ≫ Imanager Version 2.7 Update sp7_patch_6
Novell ≫ Imanager Version 2.7 Update sp7_patch_7
Novell ≫ Imanager Version 2.7 Update sp7_patch_8
Novell ≫ Imanager Version 2.7 Update sp7_patch_9
Netiq ≫ Imanager Version 3.0
Netiq ≫ Imanager Version 3.0.1
Netiq ≫ Imanager Version 3.0.2
Netiq ≫ Imanager Version 3.0.2.1
Netiq ≫ Imanager Version 3.0.3
Netiq ≫ Imanager Version 3.0.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.43
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://www.novell.com/support/kb/doc.php?id=7010166
https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
https://www.netiq.com/support/kb/doc.php?id=7016795
https://dl.netiq.com/Download?buildid=24FxpmqdThE~
https://bugzilla.novell.com/show_bug.cgi?id=1024963
https://bugzilla.novell.com/show_bug.cgi?id=1030692