5 matches found
CVE-2013-1083
Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3264
The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...
CVE-2010-3264
The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...
Novell IDM跨站脚本和HTML注入漏洞
BUGTRAQ ID: 30952 CNCAN ID:CNCAN-2008090305 Novell IDM是一款身份管理解决方案。 Novell IDM不正确处理用户提交的输入,远程攻击者可以利用漏洞使恶意脚本代码在目标用户浏览器上执行,导致敏感信息泄漏。 受影响的Novell User Application版本如下: 3.0.1 3.5.0 3.5.1 受影响的Novell Identity Manager Roles Based Provisioning模块版本如下: 3.6.0 3.6.1 Novell User Application 3.5.1 Novell User...