PT-2013-4264 · Novell · Novell Imanager

Publicado 2013-04-24 · Atualizado 2017-08-29 · CVE-2013-3268

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iManager version 2.7 before SP6 Patch 1

Description The issue concerns a token refresh problem after a logout action, with unspecified impact and remote attack vectors.

Recommendations For Novell iManager version 2.7 before SP6 Patch 1, apply SP6 Patch 1 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-3268

Produtos afetados

Novell Imanager

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/83761 · Nota
• http://novell.com/support/kb/doc.php?id=7010166 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3268 · Nota de Segurança
• https://bugzilla.novell.com/show_bug.cgi?id=807429 · Nota
• http://securityfocus.com/bid/59450 · Nota