VYPR
Get started
← All advisories
High severity7.5NVD Advisory· Published Mar 23, 2017· Updated May 13, 2026

CVE-2016-5752

CVE-2016-5752

Description

The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.

Affected products

5
  • Netiq/Access Manager5 versions
    cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:sp1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.