Vulnerability Details CVE-2017-7431
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
- https://bugzilla.novell.com/show_bug.cgi?id=1024963
- https://bugzilla.novell.com/show_bug.cgi?id=1030692
- https://dl.netiq.com/Download?buildid=24FxpmqdThE~
- https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
- https://www.netiq.com/support/kb/doc.php?id=7016795
- https://www.novell.com/support/kb/doc.php?id=7010166
- https://bugzilla.novell.com/show_bug.cgi?id=1024963
- https://bugzilla.novell.com/show_bug.cgi?id=1030692
- https://dl.netiq.com/Download?buildid=24FxpmqdThE~
- https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~
- https://www.netiq.com/support/kb/doc.php?id=7016795
- https://www.novell.com/support/kb/doc.php?id=7010166
Products affected by CVE-2017-7431
-
cpe:2.3:a:netiq:imanager:3.0
-
cpe:2.3:a:netiq:imanager:3.0.1
-
cpe:2.3:a:netiq:imanager:3.0.2
-
cpe:2.3:a:netiq:imanager:3.0.2.1
-
cpe:2.3:a:netiq:imanager:3.0.3
-
cpe:2.3:a:netiq:imanager:3.0.3.1
-
cpe:2.3:a:novell:imanager:2.7