← CVE Intelligence

CVE-2016-5752

n/a / NetIQ Access Manager PUBLISHED

Description (CNA)

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

Affected (CNA)

Vendor / productVersions
n/a / NetIQ Access Manageraffected NetIQ Access Manager

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.