CVE-2020-25839
Description
NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.
Related CPE's
References
Release Notes
Vendor Advisory
CvssV3 impact
BaseSeverity
CRITICAL
ConfidentialityImpact
HIGH
AttackComplexity
LOW
Scope
UNCHANGED
AttackVector
NETWORK
AvailabilityImpact
HIGH
IntegrityImpact
HIGH
PrivilegesRequired
NONE
BaseScore
9.8
VectorString
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version
3.1
UserInteraction
NONE
CvssV2 impact
AccessComplexity
LOW
ConfidentialityImpact
PARTIAL
AvailabilityImpact
PARTIAL
IntegrityImpact
PARTIAL
BaseScore
7.5
VectorString
AV:N/AC:L/Au:N/C:P/I:P/A:P
Version
2.0
AccessVector
NETWORK
Authentication
NONE