CVE-2021-22515 — Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

CVE-2021-22515

Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server PUBLISHED

Description (CNA)

Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.

Affected (CNA)

Vendor / product	Versions
Micro Focus / NetIQ Advanced Authentication	affected NetIQ Advanced Authentication before 6.3 SP4 Patch 1

CWE

No CWE identifiers supplied.

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6341/data/advanced-authentication-releasenotes-6341.html

ADP enrichment

CVE

No English description supplied.

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6341/data/advanced-authentication-releasenotes-6341.html