CVE-2021-22515

Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

State: Published
Severity: 4.8 Medium
Published: Jul 12, 2021
Updated: Sep 17, 2024
Reserved: Jan 5, 2021

Description

Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.

Scores

CVSS	Score	Vector	Source
3.1	4.8 Medium	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N	microfocus

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
NetIQ Advanced AuthenticationMicro Focus	NetIQ Advanced Authentication to before 6.3 SP4 Patch 1Affected

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6341/data/advanced-authentication-releasenotes-6341.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.