CVE-2017-7429

Fix for NetIQ shell code upload

State: Published
Severity: 8.8 High
Published: Mar 2, 2018
Updated: Sep 16, 2024
Reserved: Apr 5, 2017

Description

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	microfocus

Weaknesses

CWE-434

Affected Products

Product	Versions
eDirectoryNetIQ	before 8.8.8 Patch 10 HF1Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1024957
https://www.novell.com/support/kb/doc.php?id=3426981
https://www.netiq.com/documentation/edir88/edir88810hf1_releasenotes/data/edir88810hf1_releasenotes.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.