CVE-2021-22509CWE-312

Handling of sensitive data in process memory in NetIQ Advance Authentication

High · published August 28, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-08-28T06:29Z
EPSS history
Timeline
  • 28 AUG 06:29Z
    Handling of sensitive data in process memory in NetIQ Advance Authentication
    cvelistv5