CVE-2016-5752

CVE-2016-5752 describes an improper handling of unsigned SAML requests in NetIQ Access Manager versions 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2. This vulnerability could lead to information leakage, as results were incorrectly redirected to a potentially malicious "Assertion Consumer Service URL" instead of the legitimate requester. With a CVSS v3 score of 7.5 (High), it presents a significant risk due to its network-based attack vector and low attack complexity, potentially resulting in high confidentiality impact without requiring user interaction. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.