Security Advisory

CVE-2016-5751

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-23 06:36:00
Last updated 2024-08-06 01:08:00
Assigner microfocus
State PUBLISHED

Description

An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authentication credentials.