CVE-2018-7674

EUVD-2018-19390
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
microfocusCNA
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
netiqidentity_manager
𝑥
≤ 4.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html
https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html