CVE-2017-7429 in NetIQ eDirectory PKI Plugin

Summary

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 04/05/2017
• Disclosure: 03/02/2018
• Moderation: VulDB entry created
• Entries: VDB-114017 (1)
• CPE: ready
• CWE: CWE-295 (Confirmed)
• CVSS: 7.5
• EPSS: 0.00194
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7429
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7429
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7429/