CVE-2018-7675 - CVE House
Back to Database
Status published Low CVE-2018-7675

Potential Information Disclosure in Sentinel

Vulnerability Description

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of the other users privileges, they are able to view the previous screen. In this case it is possible that the user can see another users events or configuration information for whatever view is currently showing.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7675

Credits & Attribution

No credits recorded in the NVD database.

References

More from NetIQ Corporation

View All →
CVE-2017-7425
Multiple Reflected XSS in iManager
High 7.6

Affected Vendor

NetIQ Corporation

View all reports →

Affected Software

Sentinel
Vulnerable Versions:
Sentinel 8.1.X 8.1.X

Timeline

Official Publish: March 7th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.