CVE-2017-14802 Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netiq access manager | <= 4.3 | No fix listed |
| netiq access manager | >= 4.3, < 4.3.3 | 4.3.3 |