Skip to content
OpenAdvisories
Unscored CVE-2017-14803 EUVD-2017-6292GHSA-w8wj-w6xx-2wp8

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conn…

Published Jan 20, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: NetIQ Access Manager

Description

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.

Affected products

VendorProductAffectedFixed
Micro Focus NetIQ Access Manager 4.3, 4.4 —

References