CVE-2022-26329 - CVE House
Back to Database
Status published Low CVE-2022-26329

File existence disclosue vulnerability in IDM plugin

Vulnerability Description

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26329

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Special thanks go to Kajetan Rostojek for responsibly disclosing this information to us.

References

More from Micro Focus

View All →
CVE-2023-32265
Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.
High 7.1
CVE-2023-32263
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Low 2.6
CVE-2023-32262
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Medium 4.3
CVE-2023-32261
Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
Medium 4.2
CVE-2022-38758
XSS vulnerabilities in iManager
High 7.2

Affected Vendor

Micro Focus

View all reports →

Affected Software

NetIQ Identity Manager
Vulnerable Versions:
NetIQ Identity Manager

Timeline

Official Publish: January 24th, 2023
Last Modified: April 1st, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-538

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.