CVE-2016-5748: XEE
External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local files to logged-in users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5748?
CVE-2016-5748 is rated as a high severity vulnerability due to its potential to disclose sensitive data from local files.
How do I fix CVE-2016-5748?
To fix CVE-2016-5748, update to NetIQ Access Manager version 4.1.2 Hot Fix 1 or 4.2.2 or later.
What types of attacks can exploit CVE-2016-5748?
CVE-2016-5748 can be exploited through XML External Entity (XXE) attacks, allowing an attacker to read local files.
What versions of NetIQ Access Manager are affected by CVE-2016-5748?
CVE-2016-5748 affects NetIQ Access Manager versions 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2.
What are the consequences of exploiting CVE-2016-5748?
Exploiting CVE-2016-5748 could lead to unauthorized disclosure of confidential local file contents to logged-in users.