CVE-2012-6534

2013-03-2916:08:58

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.049

Percentile

92.8%

JSON

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results “Save Query As” “Save As Retention Policy” action.

Affected configurations

Nvd

Node

novellsentinel_log_managerRange≤1.2.0.2

novellsentinel_log_managerMatch1.0.0.4

novellsentinel_log_managerMatch1.0.0.5

novellsentinel_log_managerMatch1.1.0.0

novellsentinel_log_managerMatch1.1.0.1

novellsentinel_log_managerMatch1.1.0.2

novellsentinel_log_managerMatch1.2

novellsentinel_log_managerMatch1.2.0.1

VendorProductVersionCPE
novellsentinel_log_manager*cpe:2.3:a:novell:sentinel_log_manager:*:*:*:*:*:*:*:*
novellsentinel_log_manager1.0.0.4cpe:2.3:a:novell:sentinel_log_manager:1.0.0.4:*:*:*:*:*:*:*
novellsentinel_log_manager1.0.0.5cpe:2.3:a:novell:sentinel_log_manager:1.0.0.5:*:*:*:*:*:*:*
novellsentinel_log_manager1.1.0.0cpe:2.3:a:novell:sentinel_log_manager:1.1.0.0:*:*:*:*:*:*:*
novellsentinel_log_manager1.1.0.1cpe:2.3:a:novell:sentinel_log_manager:1.1.0.1:*:*:*:*:*:*:*
novellsentinel_log_manager1.1.0.2cpe:2.3:a:novell:sentinel_log_manager:1.1.0.2:*:*:*:*:*:*:*
novellsentinel_log_manager1.2cpe:2.3:a:novell:sentinel_log_manager:1.2:*:*:*:*:*:*:*
novellsentinel_log_manager1.2.0.1cpe:2.3:a:novell:sentinel_log_manager:1.2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	sentinel_log_manager	*	cpe:2.3:a:novell:sentinel_log_manager::::::::
novell	sentinel_log_manager	1.0.0.4	cpe:2.3:a:novell:sentinel_log_manager:1.0.0.4:::::::*
novell	sentinel_log_manager	1.0.0.5	cpe:2.3:a:novell:sentinel_log_manager:1.0.0.5:::::::*
novell	sentinel_log_manager	1.1.0.0	cpe:2.3:a:novell:sentinel_log_manager:1.1.0.0:::::::*
novell	sentinel_log_manager	1.1.0.1	cpe:2.3:a:novell:sentinel_log_manager:1.1.0.1:::::::*
novell	sentinel_log_manager	1.1.0.2	cpe:2.3:a:novell:sentinel_log_manager:1.1.0.2:::::::*
novell	sentinel_log_manager	1.2	cpe:2.3:a:novell:sentinel_log_manager:1.2:::::::*
novell	sentinel_log_manager	1.2.0.1	cpe:2.3:a:novell:sentinel_log_manager:1.2.0.1:::::::*