CVEvulnerability
CVE-2009-4879
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-05-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.
Affected configurations
• novell access manager (<= 3.1)
• novell access manager 3
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html www.novell.com
- http://www.securitytracker.com/id?1022581 www.securitytracker.com
- http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html www.novell.com
- http://www.securitytracker.com/id?1022581 www.securitytracker.com