National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/a:novell:access_manager:3
There are 5 matching records.
Vuln ID Summary CVSS Severity
CVE-2009-4879

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Published: May 26, 2010; 02:30:01 PM -04:00
    V2: 4.3 MEDIUM
CVE-2009-4878

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors.

Published: May 26, 2010; 02:30:01 PM -04:00
    V2: 4.3 MEDIUM
CVE-2008-6722

Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache.

Published: April 14, 2009; 12:26:56 PM -04:00
    V2: 1.9 LOW
CVE-2007-3570

The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.

Published: July 05, 2007; 03:30:00 PM -04:00
    V2: 7.5 HIGH
CVE-2007-1309

Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.

Published: March 06, 2007; 07:19:00 PM -05:00
    V2: 9.0 HIGH