CVE-2009-4879 - The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions

Back Back to CVE browser

MEDIUM

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions

Published May 26, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 1.04%

Description

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html
x_refsource_CONFIRM
http://www.securitytracker.com/id?1022581
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4842
Advisory

Link	Providers	Tags
http://www.novell.com/documentation/novellaccessmanager31/accessmanager_readme/data/accessmanager_readme.html		x_refsource_CONFIRM
http://www.securitytracker.com/id?1022581		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4842		Advisory