Last Summer, the Paranoid’s Vulnerability Research Team (VRT) identified a series of vulnerabilities in OpenText NetIQ iManager, an enterprise direc

Paranoids’ Vulnerability Research: NetIQ iManager Security Alerts

submited by

Style Pass

2024-10-30 19:30:03

Last Summer, the Paranoid’s Vulnerability Research Team (VRT) identified a series of vulnerabilities in OpenText NetIQ iManager, an enterprise directory management tool. Some of the vulnerabilities can be chained together by an attacker to achieve pre-authentication remote code execution. In other cases, an attacker with any valid credentials can escalate their privileges within the platform and ultimately achieve post-auth code execution.

Fixes for these vulnerabilities were released with version 3.2.6.0300 as of April 2024. More information can be found in the product release notes. If you have not yet upgraded your iManager installations to the latest version by now, you should do so now before moving on to read the rest of this post.

While we’d love to cover all the aforementioned vulnerabilities, some of which are quite intriguing in their own right, we’re going to keep things focused on a handful of vulnerabilities in this post: CVE-2024-4429, CVE-2024-3488, CVE-2024-3487, and CVE-2024-3483. Individually, each of these bugs are quite tame. However, when chained together, they can be leveraged to achieve full compromise of the iManager server.