CVE-2016-5754

CVE-2016-5754 describes an information disclosure vulnerability in NetIQ Access Manager versions 4.1 (prior to 4.1.2 Hot Fix 1) and 4.2 (prior to SP2), where the presence of a .htaccess file could inadvertently leak sensitive information. This vulnerability carries a CVSS v3 score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity that could lead to significant confidentiality impacts without requiring user interaction or privileges. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion, suggesting awareness within security circles.