Skip to content

CVE-2017-9278 Avoid password disclosure via EBS event logging in the iManager Oracle driver

CriticalCVSS 9.8 EPSS 0.91%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.

Affected products

ProductAffected versionsFixed in
netiq identity manager < 4.0.2.0 4.0.2.0
netiq Identity Manager Oracle EBS driver < 4.0.2.0 4.0.2.0

References