CVE-2017-7431

High

Published: 03/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in user, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest version of iManager to mitigate this vulnerability.

Other vulnerabilities in Novell iManager, NetIQ iManager

CVE-2017-7432Critical
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

Original NVD description (English source)

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.