PT-2013-1998 · Novell · Novell Sentinel Log Manager

Piotr Chmylkowski · Published 2013-03-29 · Updated 2017-10-05 · CVE-2012-6534

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Sentinel Log Manager versions prior to 1.2.0.3

Description The issue allows remote attackers to create data retention policies by sending a crafted text/x-gwt-rpc request to the "novelllogmanager/datastorageservice.rpc" API endpoint. Additionally, remote authenticated Report Administrators can create data retention policies via a "Save Query As" and then "Save As Retention Policy" action in the search results.

Recommendations For versions prior to 1.2.0.3, update to version 1.2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "novelllogmanager/datastorageservice.rpc" API endpoint and limiting the ability of Report Administrators to create data retention policies via the search results "Save Query As" and "Save As Retention Policy" action.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-6534

Affected Products

Novell Sentinel Log Manager

References · 7

• 🔥 https://exploit-db.com/exploits/21744 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Oct/25 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6534 · Security Note
• https://bugzilla.novell.com/show_bug.cgi?id=771634 · Note
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5150932.html · Note
• https://netiq.com/documentation/novelllogmanager12/readme/data/log_manager1203_readme.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6534 · Note