Novell

Access Manager

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2010-0284

  • EPSS 8.58%
  • Published 18.06.2010 16:30:01
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows...

4.3

CVE-2009-4878

  • EPSS 0.82%
  • Published 26.05.2010 18:30:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors.

4.3

CVE-2009-4879

  • EPSS 0.1%
  • Published 26.05.2010 18:30:01
  • Last modified 11.04.2025 00:51:21

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

1.9

CVE-2008-6722

  • EPSS 0.06%
  • Published 14.04.2009 16:26:56
  • Last modified 09.04.2025 00:30:58

Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessi...

7.5

CVE-2007-3570

  • EPSS 0.16%
  • Published 05.07.2007 19:30:00
  • Last modified 09.04.2025 00:30:58

The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.

9

CVE-2007-1309

  • EPSS 0.45%
  • Published 07.03.2007 00:19:00
  • Last modified 09.04.2025 00:30:58

Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.