Broken access control in Advanced Authentication versions before 6.4.1.1 and 6.3.7.2
netiq advanced authentication