CVE-2017-7431

high-risk

Published 2017-05-03

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

Do I need to act?

0.27% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Imanager

Netiq Novell

https://bugzilla.novell.com/show_bug.cgi?id=1024963

https://bugzilla.novell.com/show_bug.cgi?id=1030692

https://dl.netiq.com/Download?buildid=24FxpmqdThE~

https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~

https://www.netiq.com/support/kb/doc.php?id=7016795

https://www.novell.com/support/kb/doc.php?id=7010166

https://bugzilla.novell.com/show_bug.cgi?id=1024963

https://bugzilla.novell.com/show_bug.cgi?id=1030692

https://dl.netiq.com/Download?buildid=24FxpmqdThE~

https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~

https://www.netiq.com/support/kb/doc.php?id=7016795

https://www.novell.com/support/kb/doc.php?id=7010166

/ 100

high-risk

Severity 30/34 · Critical

Exploitability 1/34 · Minimal

Exposure 22/34 · High