CVE-2016-5752 | BDVDB-2026-83092 Detail

NetIQ Access Manager

Description#

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.novell.com/support/kb/doc.php?id=7017809

Exploit#

No public exploit known

History#

Version 12017-03-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.