Skip to content

CVE-2017-7434 NetIQ Identity Manager JDBC driver could leak passwords in exception traces

CriticalCVSS 9.8 EPSS 0.84%
Published
Updated
Exploit status
No public exploit known

Description

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles.

Affected products

ProductAffected versionsFixed in
netiq identity manager < 4.6 4.6

References