Cross-Site Request Forgery Vulnerability in NetIQ Access Manager
CVE-2014-5217

Currently unrated

Key Information:

Vendor: Microfocus
Status: Access Manager
Vendor: CVE Published:; 23 December 2014

What is CVE-2014-5217?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Administration Console server of NetIQ Access Manager (NAM) 4.x prior to version 4.1. This security flaw enables remote attackers to manipulate the authentication of administrators, potentially allowing unauthorized changes to administrative passwords through the fw.SetPassword action. Ensuring proper anti-CSRF measures are implemented is critical to protect against this type of attack.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch