CVE-2009-4879

published 2010-05-26

CVE-2009-4879: The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
novell	access_manager	<= 3.1	—
novell	access_manager	—	—

CWE-287