CVE-2017-9279 | BDVDB-2026-97328 Detail
NetIQIdentity Manager
Description#
NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users.
Impact#
Per CVSS v3.0: confidentiality impact none, integrity impact low, availability impact none. Attack vector: local.
Weaknesses#
- CWE-434 Unrestricted Upload of File with Dangerous Type
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.