2320 matches found
CVE-2007-4526
The Client Login Extension CLE in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file...
Novell Identity Manager的Client Login Extension本地认证信息泄露漏洞
BUGTRAQ ID: 25420 Novell Identity Manager是一个身份认证管理解决方案。 Identity Manager在处理用户名和口令的保存时存在漏洞，本地攻击者可能利用此漏洞获取登录敏感信息。 Identity Manager所捆绑的Client Login Extension在用户登录时将用户名和口令写入本地文件，而登录到本地工作站的任何用户都可以读取该文件。 Novell Identity Manager 3.5.1 Novell Identity Manager 3.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2006-6607
The Java Key Store JKS for WebSphere Application Server WAS for IBM Tivoli Identity Manager ITIM 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods...
CVE-2006-6607
The CVE-2006-6607 vulnerability affects WebSphere Application Server (WAS) used with IBM Tivoli Identity Manager (ITIM) 4.6. The JKS password is exposed via a -Djavax.net.ssl.trustStorePassword command line argument, enabling local users to read the password by inspecting the process or similar m...
CVE-2006-6607
The Java Key Store JKS for WebSphere Application Server WAS for IBM Tivoli Identity Manager ITIM 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods...
IBM多个产品未明信任书伪造漏洞
IBM包含多系列产品，如IBM Tivoli，IBM WebSphere等。 IBM多个产品存在信任书伪造问题，远程攻击者可以利用这个漏洞访问资源和数据或可能控制应用程序。 目前报告此问题可以使攻击者利用COOKIE或伪造其他信任用户未授权访问资源，目前没有详细漏洞细节提供。 IBM Tivoli Access Manager for e-business 5.1 IBM Tivoli Access Manager for e-business 4.1 IBM Tivoli Access Manager for e-business 3.9 IBM Tivoli Access Manag...
CVE-2006-4803
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."...
CVE-2006-4803
The CVE-2006-4803 entry concerns Novell Identity Manager (IDM) 3.0.1, where the Fan-Out Linux and UNIX receiver scripts allow local users to execute arbitrary commands via unspecified vectors involving certain environment variables and code injection. Impact is local command execution with comple...
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...
CVE-2006-4506
The CVE-2006-4506 entry concerns Novell Identity Manager (IDM) 3.0.1, where idmlib.sh in the nxdrv component allows local users to run arbitrary commands via unspecified vectors, with potential involvement of the " (quote) and \ (backslash) characters and eval injection. Public sources in the NVD...
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...
Novell Identity Manager - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/19688/info Novell Identity Manager is prone to an arbitrary command-execution vulnerability. A local attacker can exploit this issue to execute arbitrary commands with superuser privileges. Exploiting this issue allows attackers to completely compromise...
Novell Identity Manager - Arbitrary Command Execution
Novell Identity Manager - Arbitrary Command Execution source: https://www.securityfocus.com/bid/19688/info Novell Identity Manager is prone to an arbitrary command-execution vulnerability. A local attacker can exploit this issue to execute arbitrary commands with superuser privileges. Exploiting...
CVE-2004-2558
Technical details about CVE-2004-2558 are not provided in the connected documents. Available descriptions reference an unspecified session hijacking vulnerability in IBM Tivoli/WebSphere products. Monitor for updates and rely on official advisories for precise impact and fixes.
Forefront Identity Manager 2010 Add-ins and Extensions Update (KB978864)
Forefront Identity Manager 2010 Add-ins and Extensions Update KB978864...
Forefront Identity Manager 2010 Service and Portal Language Pack Update (KB978864)
Forefront Identity Manager 2010 Service and Portal Language Pack Update KB978864...
Forefront Identity Manager 2010 Service and Portal Update (KB978864)
Forefront Identity Manager 2010 Service and Portal Update KB978864...
Forefront Identity Manager 2010 Add-ins and Extensions Language Pack Update (KB978864)
Forefront Identity Manager 2010 Add-ins and Extensions Language Pack Update KB978864...