CVE-2016-5752

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly…

published March 23, 2017

CVSS
—
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01090 · 64.9th percentile
Published
2017-03-23T06:36Z
EPSS history
Timeline
  • 23 MAR 06:36Z
    The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly…
    cvelistv5