medium4.3
CVE-2017-5189
NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and esta…
Impact
NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and establish their own connections to the Sentinel appliance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netiq | Imanager | Versions 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5 |