CVE-2014-5217
CVSS 6.8 - MEDIUM
Description
Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via an fw.SetPassword action.
Affected Products
2| Vendor | Product | Version |
|---|---|---|
| microfocus | access_manager |
4.0
|
| microfocus | access_manager |
4.0.1
|
References
Weakness Types
CWE-352
CVE Information
- CVE ID:
CVE-2014-5217- Published:
- 2014-12-23
- Modified:
- 2026-05-06
- CVSS Score:
- 6.8
- Severity:
- MEDIUM
- Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Vendors
microfocus
Quick Actions
CVSS Severity Scale
0.0 - 3.9
LOW
4.0 - 6.9
MEDIUM
7.0 - 8.9
HIGH
9.0 - 10.0
CRITICAL