Lucene search

K
nvd[email protected]NVD:CVE-2013-3268
HistoryApr 24, 2013 - 10:28 a.m.

CVE-2013-3268

2013-04-2410:28:37
CWE-287
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.

Affected configurations

NVD
Node
novellimanagerRange2.7sp6
OR
novellimanagerMatch2.7refresh6
OR
novellimanagerMatch2.7sp4
OR
novellimanagerMatch2.7sp4_patch1
OR
novellimanagerMatch2.7sp4_patch2
OR
novellimanagerMatch2.7sp4_patch3
OR
novellimanagerMatch2.7sp4_patch4
OR
novellimanagerMatch2.7sp5
OR
novellimanagerMatch2.7.0
OR
novellimanagerMatch2.7.1
OR
novellimanagerMatch2.7.2
OR
novellimanagerMatch2.7.3
OR
novellimanagerMatch2.7.3ftf2
OR
novellimanagerMatch2.7.3ftf4
OR
novellimanagerMatch2.7.3sp3
OR
novellimanagerMatch2.7.4
OR
novellimanagerMatch2.7.5

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

Related for NVD:CVE-2013-3268