CVE-2014-5214 in NetIQ Access Manager
Summary
nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Reservation
08/13/2014
Disclosure
12/23/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68464 | NetIQ Access Manager xml external entity reference | 611 | Proof-of-Concept | Official fix | CVE-2014-5214 |