Design/Logic Flaw

2018-03-0220:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

CPENameOperatorVersion
edirectoryle8.8.8
edirectoryeq8.8.8 patch10
edirectoryeq8.8.8 patch9
edirectoryeq8.8.8 patch8
edirectoryeq8.8.8 patch7
edirectoryeq8.8.8 patch6
edirectoryeq8.8.8 patch5

Name	Operator	Version
edirectory	le	8.8.8
edirectory	eq	8.8.8 patch10
edirectory	eq	8.8.8 patch9
edirectory	eq	8.8.8 patch8
edirectory	eq	8.8.8 patch7
edirectory	eq	8.8.8 patch6
edirectory	eq	8.8.8 patch5