CVE-2017-14803

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@opentext.com

Published

2018-01-20

Last modified

2024-09-16

Affected products

• Netiq Access Manager (Micro Focus)
• Access Manager (Netiq)

References

• https://www.novell.com/support/kb/doc.php?id=7022443