CVE-2014-4509: Medium severity micro focus identity manager vulnerability

Published Jun 21, 2014

Updated

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters.

Affected Software

1 affected component

NetIQ Identity Manager=4.0.2

Remediation

Patch Available

http://download.novell.com/Download?buildid=5XLmBl54_Rg~

Event History

Jun 21, 2014

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4509?

CVE-2014-4509 is considered a high severity vulnerability due to its potential for local users to execute arbitrary commands.

How do I fix CVE-2014-4509?

To fix CVE-2014-4509, it is recommended to upgrade to a patched version of Novell Identity Manager that eliminates the vulnerability.

Who is affected by CVE-2014-4509?

CVE-2014-4509 affects local users of Novell Identity Manager version 4.0.2.

What type of vulnerability is CVE-2014-4509?

CVE-2014-4509 is a command injection vulnerability that can be exploited by local users.

Can CVE-2014-4509 lead to unauthorized access?

Yes, CVE-2014-4509 can lead to unauthorized access as it allows local users to execute arbitrary commands.