CVE-2017-14802

CVSS 5.4 - MEDIUM
Description

Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.

Affected Products
1
Vendor Product Version
netiq access_manager All versions
Weakness Types
CWE-601 CWE-601
CVE Information
CVE ID:
CVE-2017-14802
Published:
2018-03-02
Modified:
2024-11-21
CVSS Score:
5.4
Severity:
MEDIUM
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Vendors
netiq
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL