Medium severity4.3NVD Advisory· Published Mar 2, 2018· Updated Jun 17, 2026

CVE-2017-9280

Description

Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microfocus/Identity Managercpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

bugzilla.suse.com/show_bug.cginvd
download.novell.com/Downloadnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000