Access Manager (Novell) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2010-06-18. Vendor: Novell.

CVEs of Access Manager

• CVE-2010-0284 - CVSS 10 (critical), 2010-06-18: Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console…
• CVE-2009-4879 - CVSS 4.3 (medium), 2010-05-26: The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509…
• CVE-2009-4878 - CVSS 4.3 (medium), 2010-05-26: Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack…
• CVE-2008-6722 - CVSS 1.9 (low), 2009-04-14: Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by…
• CVE-2007-3570 - CVSS 7.5 (high), 2007-07-05: The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via…
• CVE-2007-1309 - CVSS 9 (critical), 2007-03-07: Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then…