CVE-2018-7675 Potential Information Disclosure in Sentinel
An attacker can view another user's session data after idle timeout due to improper session termination in NetIQ Sentinel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-7675?
CVE-2018-7675 is a low-severity vulnerability in NetIQ Corporation Sentinel, published on 7 Mar 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of the other users privileges, they are able to view the previous screen. In this case it is possible that the user can see another users events or configuration information for whatever view is currently showing.
Weakness: CWE-200
Which versions are affected by CVE-2018-7675?
It affects 1 product.
Products include Microfocus Sentinel.
How do I fix CVE-2018-7675?
No fix has been published for CVE-2018-7675 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-7675 being exploited?
There is no known exploitation of CVE-2018-7675 in the wild and no public exploit code.
Other vulnerabilities in NetIQ Corporation Sentinel
Sources
Also known as GHSA-m7qw-mwjx-2vpf.