Solutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.5
CVE-2018-19645

9.8CRITICAL

Key Information:

Vendor

Netiq Edirectory

Status
Netiq Access Manager (nam)
Vendor
CVE Published:
12 February 2019

What is CVE-2018-19645?

An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NetIQ Access Manager (NAM) Solutions Business Manager (SBM) < 11.5

References

http://help.serena.com/doc_center/sbm/ver11_5/sbm_release...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
JSON
.