← Back

CVE-2013-3268

nvd nist
Published: Apr 24, 2013Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.

Affected (17)

Products: Novell: Imanager
Novell
1 product
Imanager
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Novell
Imanager
Up to 2.7
Imanager
Version 2.7.0
Imanager
Version 2.7.1
Imanager
Version 2.7.2
Imanager
Version 2.7.3
Imanager
Version 2.7.3 ftf2
Imanager
Version 2.7.3 ftf4
Imanager
Version 2.7.3 sp3
Imanager
Version 2.7.4
Imanager
Version 2.7.5
Imanager
Version 2.7 refresh6
Imanager
Version 2.7 sp4
Imanager
Version 2.7 sp4_patch1
Imanager
Version 2.7 sp4_patch2
Imanager
Version 2.7 sp4_patch3
Imanager
Version 2.7 sp4_patch4
Imanager
Version 2.7 sp5

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (8)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.