CVE-2016-5749 | BDVDB-2026-83089 Detail

NetIQ Access Manager

Description#

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity (XXE) attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.novell.com/support/kb/doc.php?id=7017806

Exploit#

No public exploit known

History#

Version 12017-03-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.