Skip to content
fr Sign in
Not rated

CVE-2016-5752 The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was…

Description

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

Affected products and versions

Product Affected versions Fixed in
NetIQ Access Manager Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of NetIQ Access Manager

The 10 CVEs of NetIQ Access Manager →
CVE-2021-22531 A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site… Not rated CVE-2016-5749 NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external… Not rated CVE-2016-5751 An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1… Not rated CVE-2016-5754 Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before… Not rated
Track this CVE