What’s Vulnerable › Vulnerabilities

CVE-2017-5190

• Severity: low (CVSS 3.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-20 · updated 2026-06-17
• Weakness: CWE-200

Description

NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile.

Affected products

• NetIQ Access Manager: through 4.2; through 4.3

References

• http://www.securityfocus.com/bid/97965
• http://www.securitytracker.com/id/1038338
• https://www.novell.com/support/kb/doc.php?id=7018792
• http://www.securityfocus.com/bid/97965
• http://www.securitytracker.com/id/1038338
• https://www.novell.com/support/kb/doc.php?id=7018792

Get alerted when CVE-2017-5190 or the next vulnerability affects your stack