Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-22515 EUVD-2021-9657GHSA-8hm3-6v9w-j99h

Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

Published Jul 12, 2021 · Updated Sep 17, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: NetIQ Advanced Authentication

Description

Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.

Affected products

VendorProductAffectedFixed
Micro Focus NetIQ Advanced Authentication NetIQ Advanced Authentication – < 6.3 SP4 Patch 1 6.3 SP4 Patch 1

References