Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2017-7429

Fix for NetIQ shell code upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetIQ eDirectory

  • unspecified to < 8.8.8 Patch 10 HF1affected

References