Novell Access Manager Administration Console Information Disclosure Vulnerability

Bugtraq ID:	35734
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 17 2009 12:00AM
Updated:	Jul 20 2009 05:56PM
Credit:	The vendor reported the issue.
Vulnerable:	Novell Access Manager 3.1 Novell Access Manager 3
Not Vulnerable:	Novell Access Manager 3.1 SP1

Novell Access Manager Administration Console Information Disclosure Vulnerability

Novell Access Manager is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may aid in further attacks.

The vulnerability affects versions prior to Novell Access Manager 3.1 SP1.

Novell Access Manager Administration Console Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell Access Manager Administration Console Information Disclosure Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

Novell Access Manager Administration Console Information Disclosure Vulnerability

References:

• Novell Access Manager 3.1 SP1 Readme (Novell)
  
• Novell Access Manager Homepage (Novell)