CVE-2010-3264

The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...

Design/Logic Flaw

The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...

CVE-2010-3264

The CVE-2010-3264 entry affects Novell Identity Manager (IDM) 3.6.1: the engine installer writes admin tree credentials to /tmp/idmInstall.log, exposing sensitive information to any local user who reads that file. This is a local-privilege-exposure issue rooted in the installer’s handling of cred...