CVE-2018-1345 NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack

Description

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.

Affected products and versions

Product	Affected versions	Fixed in
iManager 3.1	earliest → < 3.1	3.1

Other CVEs of iManager

The 5 CVEs of iManager →

CVE-2018-12462 NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities 4.8 Medium CVE-2018-1347 The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site… 5.3 Medium CVE-2018-1344 Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 3.1 Low CVE-2017-5189 NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel,… 4.3 Medium