CVE-2022-26329

File existence disclosue vulnerability in IDM plugin

State: Published
Severity: 1.8 Low
Published: Jan 24, 2023
Updated: Apr 1, 2025
Reserved: Feb 28, 2022

Description

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL.

Scores

CVSS	Score	Vector	Source
3.1	1.8 Low	CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N	microfocus

Weaknesses

CWE-538 File and Directory Information Exposure

Affected Products

Product	Versions
NetIQ Identity ManagerMicro Focus	NetIQ Identity Manager to before 4.8.5Affected

References

https://www.netiq.com/documentation/identity-manager-48/releasenotes_idm485/data/software-fixes.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.