CVE-2016-5758
HighSummary
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
Risk Assessment
The organization may be exposed to CSRF attacks, which could lead to unauthorized actions within the system and potential data loss.
Recommendation
It is recommended to upgrade to version 4.1.2 Hot Fix 1 or 4.2.2 to patch this vulnerability and implement additional CSRF protection mechanisms.
Other vulnerabilities in NetIQ Access Manager
See all- CVE-2016-5754High
The presence of a .htaccess file in NetIQ Access Manager 4.1 before version 4.1.2 Hot Fix 1 and 4.2 before SP2 may lead to information leakage.
- CVE-2016-5752High
The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious 'Assertion Consumer Service URL' instead of the original requester.
Original NVD description (English source)
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.