Vulnerability · Published Jan 24, 2023 · Assigned by microfocus
CVE-2022-26329File existence disclosue vulnerability in IDM plugin
Low 1.8
In plain English
A low-severity security flaw in NetIQ Identity Manager from Micro Focus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)1.8Low
Exploit odds (30 days)0.5%top 58.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Micro Focus | NetIQ Identity Manager | NetIQ Identity Manager – before 4.8.5 |
Weakness: CWE-538 · Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N