microfocus edirectory CVE-2017-7429 in Micro Focus and Netiq Products
Published on March 2, 2018

Fix for NetIQ shell code upload

product logo product logo
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

NVD

Weakness Type

What is an Unrestricted File Upload Vulnerability?

The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

CVE-2017-7429 has been classified to as an Unrestricted File Upload vulnerability or weakness.


Products Associated with CVE-2017-7429

stack.watch emails you whenever new vulnerabilities are published in Micro Focus Edirectory or Netiq Edirectory. Just hit a watch button to start following.

 
 

Affected Versions

NetIQ eDirectory:

Exploit Probability

EPSS
0.19%
Percentile
41.16%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.