CVE-2010-0284

Summary: CVE-2010-0284 affects Novell Access Manager (Administration Console) via the PortalModuleInstallManager in nps.jar. A directory traversal in getEntry allows remote attackers to create arbitrary files and, as a result, execute arbitrary code. This impacts Windows installations of Novell A...

CVE-2009-4879

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions...

CVE-2009-4878

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

Authentication flaw

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions...

CVE-2009-4879

CVE-2009-4879 affects the Identity Server in Novell Access Manager prior to version 3.1 SP1. The root cause is an authentication bypass where attackers with disabled Active Directory accounts can authenticate via X.509, bypassing intended access restrictions. The description confirms the impact i...

CVE-2009-4878

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

CVE-2009-4878

Technical details about CVE-2009-4878 are not provided in the supplied documents; no specifics on affected versions, root cause, or remediation are available. Monitor for updates.

CVE-2009-4879

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions...

Sun JS Access Manager And OpenSSO Unspecified Vulnerability

The host is running Access Manager or OpenSSO and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodsjsamnopenssounspecifiedvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Sun JS Access Manager And OpenSSO Unspecified Vulnerability Authors: Antu Sanadi Copyright: Copyright...

Sun JS Access Manager And OpenSSO Unspecified Vulnerability

Access Manager or OpenSSO is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise 8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-0894

Technical details about CVE-2010-0894 are not publicly provided in the supplied documents. Monitor for updates.

Solaris 5.9 (x86) : 126356-03

Sun Java System Access Manager 7.1 Solaris. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Input validation

Unspecified vulnerability in Sun Java System Identity Manager aka IdM 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors...

CVE-2010-0311

Technical details about CVE-2010-0311 are not publicly provided in the supplied documents; no concrete affected products, versions, or remediation info are listed here. Monitor for updates in the connected sources.

CVE-2010-0066

Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0066

Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0066

CVE-2010-0066 affects Oracle Application Server’s Access Manager Identity Server. The vulnerability permits remote attackers to affect integrity via HTTP without authentication and has a CVSS v2 base score of 5.0 (medium). Affected releases are Oracle Application Server 7.0.4.3 and 10.1.4.2. The ...