Description (CNA)
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / NAM Identity Server and SAML2 Service Provider | affected NAM Identity Server and SAML2 Service Provider |
CWE
No CWE identifiers supplied.
References
- https://www.novell.com/support/kb/doc.php?id=7018792
- http://www.securityfocus.com/bid/97965
- http://www.securitytracker.com/id/1038338
ADP enrichment
No English description supplied.