← CVE Intelligence

CVE-2016-5749

n/a / NetIQ Access Manager PUBLISHED

Description (CNA)

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity (XXE) attack.

Affected (CNA)

Vendor / productVersions
n/a / NetIQ Access Manageraffected NetIQ Access Manager

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.