CVE-2018-7673: NetIQ Identity Manager DoS Attack

Security readout for executives and security teams

NetIQ Identity Manager versions before 4.7 can be forced into a denial-of-service condition in its communication channel. The business impact is availability, not data theft or modification, based on the CVSS fields. Because the CVSS vector is local and high complexity, urgency is moderate unless critical identity workflows depend on affected servers. Exposure is most likely on NetIQ Identity Manager installations running versions before 4.7. The CVSS local attack vector suggests exposure depends on local access or a local attack path, not broad unauthenticated internet reach, based on the supplied evidence. Treat this as a moderate availability risk for identity infrastructure. It should be scheduled remediation, accelerated where Identity Manager downtime would affect authentication, provisioning, compliance operations, or business-critical access workflows. Mitigation focus: Inventory NetIQ Identity Manager deployments and identify versions below 4.7.; Plan upgrade to NetIQ Identity Manager 4.7 or vendor-supported later versions.; Review NetIQ release notes and current vendor guidance before change execution..

Prepared

Jun 1, 2026, 04:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.