Access Manager

access_manager

Vendor: Novell • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0284 1Novell 1Access Manager Apr 29, 2026 Jun 18, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 befo...Show more Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.Show less
CVE-2009-4879 1Novell 1Access Manager Apr 29, 2026 May 26, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.
CVE-2009-4878 1Novell 1Access Manager Apr 29, 2026 May 26, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors.
CVE-2008-6722 1Novell 1Access Manager Apr 23, 2026 Apr 14, 2009 N/A· v4 N/A· v3 1.9 LOW· v2 Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send th...Show more Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache.Show less
CVE-2007-3570 1Novell 1Access Manager Apr 23, 2026 Jul 5, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST reque...Show more The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.Show less
CVE-2007-1309 1Novell 1Access Manager Apr 23, 2026 Mar 7, 2007 N/A· v4 N/A· v3 9.0 HIGH· v2 Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.