CVE-2017-7429: Fix for NetIQ shell code upload
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7429?
CVE-2017-7429 has a high severity rating due to the potential for authenticated attackers to execute JSP applets on the affected iManager server.
How do I fix CVE-2017-7429?
To remediate CVE-2017-7429, upgrade the NetIQ eDirectory PKI plugin to version 8.8.8 Patch 10 Hotfix 1 or later.
What causes CVE-2017-7429?
CVE-2017-7429 is caused by insecure handling of certificate uploads in the NetIQ eDirectory PKI plugin, allowing JSP code execution.
Which versions are affected by CVE-2017-7429?
CVE-2017-7429 affects NetIQ eDirectory versions up to 8.8.8, including patches 5 through 9.
Who is impacted by CVE-2017-7429?
Organizations using affected versions of the NetIQ eDirectory PKI plugin may be at risk from authenticated attackers exploiting this vulnerability.