CVE-2021-22509: Handling of sensitive data in process memory in NetIQ Advance Authentication
First published: Wed Aug 28 2024(Updated: )
A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1
Credit: security@opentext.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenText NetIQ Advanced Authentication | <6.3 | |
| OpenText NetIQ Advanced Authentication | =6.3 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp1 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp2 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp3 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp4 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp4_patch1 | |
| OpenText NetIQ Advanced Authentication | =6.3-sp5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2021-22509?
CVE-2021-22509 is considered a moderate severity vulnerability due to the potential leakage of sensitive data.
How do I fix CVE-2021-22509?
To fix CVE-2021-22509, upgrade your NetIQ Advanced Authentication to version 6.3.5.1 or later.
What types of data are at risk with CVE-2021-22509?
CVE-2021-22509 can lead to the exposure of sensitive user information to unauthorized users.
Which versions of NetIQ Advanced Authentication are affected by CVE-2021-22509?
CVE-2021-22509 affects all versions of NetIQ Advanced Authentication prior to 6.3.5.1.
Is CVE-2021-22509 applicable to NetIQ Advanced Authentication 6.3 with service packs?
Yes, CVE-2021-22509 is applicable to NetIQ Advanced Authentication 6.3 including all service packs up to 6.3.4.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/microfocus
- canonical/opentext netiq advanced authentication
- version/opentext netiq advanced authentication/6.3
- version/opentext netiq advanced authentication/6.3-sp1
- version/opentext netiq advanced authentication/6.3-sp2
- version/opentext netiq advanced authentication/6.3-sp3
- version/opentext netiq advanced authentication/6.3-sp4
- version/opentext netiq advanced authentication/6.3-sp4_patch1
- version/opentext netiq advanced authentication/6.3-sp5