CVE-2012-6534
Published Mar 29, 2013
Last updated 7 years ago
Overview
- Description
- Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save Query As" "Save As Retention Policy" action.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A1901D1-CD7E-49F9-BA59-6B04C2018979",
"versionEndIncluding": "1.2.0.2"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1F04269-CFDB-4209-AB0F-64D8C5E54E30"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED793BDE-F237-49DA-ACD6-FDD9BDFADAB6"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F30D28A-31FB-4E2D-A2C5-E01C922B4E9D"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23988310-A342-44C2-87B6-C9509DEAFF18"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B16902C-B678-4DAC-B1D4-6B0EF92E71D6"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE4A4F9F-EC22-47F6-A476-D6AB6822B21F"
},
{
"criteria": "cpe:2.3:a:novell:sentinel_log_manager:1.2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D1FC3A1-AF7A-45AF-8337-62FEC7C73643"
}
],
"operator": "OR"
}
]
}
]