Upstream information

CVE-2017-5191 at MITRE

Description

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header.

SUSE information

Overall state of this security issue: Does not affect SUSE products

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

  • TID7018793, published Sa 3. Mär 12:02:20 CET 2018

SUSE Timeline for this CVE

CVE page created: Mon Apr 24 21:21:02 2017
CVE page last modified: Tue Jul 1 12:30:55 2025