CVE-2016-5751 An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authenticat...
MediumCVSS 6.1
EPSS 0.71%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authentication credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netiq access manager | = 4.1 | No fix listed |
| netiq access manager | = 4.1-sp1 | No fix listed |
| netiq access manager | = 4.1-sp2 | No fix listed |
| netiq access manager | = 4.2 | No fix listed |
| netiq access manager | = 4.2-sp1 | No fix listed |