CVE-2010-0284
Published Jun 18, 2010Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management C…
Vendor/product archive
novell / access_manager CVEs
Beta · best-effort6 CVEs tagged to novell / access_manager — 2 Critical, 1 High, 2 Medium, 1 Low, 0 Unrated.
CVE-2009-4879
Published May 26, 2010The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses int…
CVE-2009-4878
Published May 26, 2010Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors.
CVE-2008-6722
Published Apr 14, 2009Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-…
CVE-2007-3570
Published Jul 5, 2007The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth…
CVE-2007-1309
Published Mar 7, 2007Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy…
Showing 1-6 of 6 CVEsPage 1 of 1