Symantec Identity Manager Management Console

What is the Symantec Identity Manager Management Console?

The Symantec Identity Manager Management Console is a module designed to administrate the Symantec Identity Manager environment. It targets the Symantec Identity Manager Management Console, which is used for managing user identities and access privileges. This module is informative in terms of severity and was authored by therealtoastycat.

Impact

This module does not have a direct impact on the system. It is used to detect misconfigurations or vulnerabilities in the Symantec Identity Manager Management Console.

How does the module work?

The module works by sending an HTTP GET request to the "/iam/immanage/login.jsp" path of the target system. It then applies two matching conditions:

- The response body must contain the word "<title>Management Console</title>". - The response status code must be 200.

If both conditions are met, the module reports a vulnerability or misconfiguration related to the Symantec Identity Manager Management Console.

Reference:

- https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/configuring/environments-overview/man