CVE-2012-6534

Published: Mar 29, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.

Affected (8)

Products: Novell: Sentinel Log Manager

Novell

1 product

Sentinel Log Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Novell Sentinel Log Manager	Up to 1.2.0.2
Novell Sentinel Log Manager	Version 1.0.0.4
Novell Sentinel Log Manager	Version 1.0.0.5
Novell Sentinel Log Manager	Version 1.1.0.0
Novell Sentinel Log Manager	Version 1.1.0.1
Novell Sentinel Log Manager	Version 1.1.0.2
Novell Sentinel Log Manager	Version 1.2.0.1
Novell Sentinel Log Manager	Version 1.2