8.8

CVE-2017-7431

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Imanager Version2.7
Novell ≫ Imanager Version2.7 Updatesp1
Novell ≫ Imanager Version2.7 Updatesp2
Novell ≫ Imanager Version2.7 Updatesp3
Novell ≫ Imanager Version2.7 Updatesp4
Novell ≫ Imanager Version2.7 Updatesp4_patch1
Novell ≫ Imanager Version2.7 Updatesp4_patch2
Novell ≫ Imanager Version2.7 Updatesp4_patch3
Novell ≫ Imanager Version2.7 Updatesp4_patch4
Novell ≫ Imanager Version2.7 Updatesp5
Novell ≫ Imanager Version2.7 Updatesp6
Novell ≫ Imanager Version2.7 Updatesp7
Novell ≫ Imanager Version2.7 Updatesp7_patch_1
Novell ≫ Imanager Version2.7 Updatesp7_patch_10
Novell ≫ Imanager Version2.7 Updatesp7_patch_2
Novell ≫ Imanager Version2.7 Updatesp7_patch_3
Novell ≫ Imanager Version2.7 Updatesp7_patch_4
Novell ≫ Imanager Version2.7 Updatesp7_patch_5
Novell ≫ Imanager Version2.7 Updatesp7_patch_6
Novell ≫ Imanager Version2.7 Updatesp7_patch_7
Novell ≫ Imanager Version2.7 Updatesp7_patch_8
Novell ≫ Imanager Version2.7 Updatesp7_patch_9
Netiq ≫ Imanager Version3.0
Netiq ≫ Imanager Version3.0.1
Netiq ≫ Imanager Version3.0.2
Netiq ≫ Imanager Version3.0.2.1
Netiq ≫ Imanager Version3.0.3
Netiq ≫ Imanager Version3.0.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.43
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://www.novell.com/support/kb/doc.php?id=7010166
https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
https://www.netiq.com/support/kb/doc.php?id=7016795
https://dl.netiq.com/Download?buildid=24FxpmqdThE~
https://bugzilla.novell.com/show_bug.cgi?id=1024963
https://bugzilla.novell.com/show_bug.cgi?id=1030692