Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2017-9279

NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetIQ Identity Manager

  • unspecified to < 4.5.6.1affected

References