NetIQ Access Manager up to 4.1.2/4.2.1 Identity Server SAML2 information disclosure

Summaryinfo

A vulnerability has been found in NetIQ Access Manager up to 4.1.2/4.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Identity Server. This manipulation as part of SAML2 causes information disclosure. This vulnerability is registered as CVE-2016-5752. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in NetIQ Access Manager up to 4.1.2/4.2.1 (Access Management Software). It has been declared as problematic. Affected by this vulnerability is an unknown part of the component Identity Server. The manipulation as part of a SAML2 leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. The summary by CVE is:

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

The bug was discovered 07/04/2016. The weakness was published 03/23/2017 (Website). It is possible to read the advisory at novell.com. This vulnerability is known as CVE-2016-5752 since 06/23/2016. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 262 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 4.1.2 HF2 or 4.2.2 eliminates this vulnerability.

Similar entries are available at VDB-98399, VDB-98398, VDB-98397 and VDB-98396. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Access Management Software

Vendor

• NetIQ

Name

• Access Manager

Version

• 4.1.0
• 4.1.1
• 4.1.2
• 4.2.0
• 4.2.1

License

• commercial

Website

• Vendor: https://www.microfocus.com/netiq/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion