PT-2013-4264 · Novell · Novell Imanager

Published 2013-04-24 · Updated 2017-08-29 · CVE-2013-3268

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iManager version 2.7 before SP6 Patch 1

Description The issue concerns a token refresh problem after a logout action, with unspecified impact and remote attack vectors.

Recommendations For Novell iManager version 2.7 before SP6 Patch 1, apply SP6 Patch 1 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-3268

Affected Products

Novell Imanager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-3268 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83761 · Note
• http://novell.com/support/kb/doc.php?id=7010166 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=807429 · Note
• http://securityfocus.com/bid/59450 · Note