cbcvebase.
CVE-2012-6534
published 2013-03-29

CVE-2012-6534: Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to…

PriorityP432medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
4.49%
90.3th percentile
Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.

Affected

8 ranges
VendorProductVersion rangeFixed in
novellsentinel_log_manager<= 1.2.0.2—
novellsentinel_log_manager——
novellsentinel_log_manager——
novellsentinel_log_manager——
novellsentinel_log_manager——
novellsentinel_log_manager——
novellsentinel_log_manager——
novellsentinel_log_manager——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.